Bump vitest packages to 4.1.10

Patch bump of the exact-pinned vitest devDependencies to clear
GHSA-p63j-vcc4-9vmv (Browser Mode provider commands bypass the
file-access permission gate).

npm audit now reports 0 vulnerabilities. Lint and tests pass.

Author: manuelpuyol