[serhat] Fix frontend advisories and backend CORS normalization

[SerhatSoruklu]

What changed

• Updated frontend dependency versions to remove the reported Vite/Hono advisories.
• Replaced the backend CORS origin normalization regex with deterministic trailing-slash trimming.
• Added a regression test for CORS origin normalization and allowed-origin preflight behavior.

Why

• GitHub Dependabot reported multiple frontend dependency advisories.
• CodeQL flagged the CORS normalization regex as vulnerable to polynomial backtracking on uncontrolled input.

Validation

• npm audit --json in frontend reports 0 vulnerabilities.
• npm run typecheck in frontend passed.
• npm run build in frontend passed.
• node --test tests/security/cors.test.js tests/zee/*.test.js passed in backend.

Notes

• The frontend build still emits the pre-existing landing-page CSS budget warning, which is unrelated to this change.

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud