Track removal of temporary esbuild override after Vite compatibility catch-up

The `overrides.esbuild = 0.28.1` pin added in #867 is a temporary security workaround.

Current state:
- `vite@6.4.2` declares `esbuild` support as `^0.25.0`, so Dependabot could not lift `esbuild` to the patched line on its own.
- Forcing `esbuild@0.28.1` required setting `build.target = 'es2022'` in `vite.config.js` because esbuild 0.28.x no longer lowers one destructuring pattern to the old default browser targets.

Exit criteria:
- Re-evaluate after upgrading Vite to a version that officially supports newer esbuild releases, or after replacing the workaround with a cleaner dependency update.
- Remove the explicit `overrides.esbuild` pin if the dependency tree resolves to a patched esbuild version without it.
- Revisit whether the explicit `build.target = 'es2022'` compatibility knob is still needed once the override is gone.

Follow-up from: #867