Update dependencies

[stepchowfun]

Update React and React DOM from 19.2.7 to 19.2.8, @vitejs/plugin-react from 6.0.3 to 6.0.4, and Vite+ / its aliased Vite core from 0.2.5 to 0.2.6. The Vite+ update also refreshes its bundled toolchain, notably Oxc 0.139 → 0.141, Oxfmt 0.58 → 0.60, Oxlint 1.73 → 1.75, stable tsgolint 7, and Lightning CSS 1.32 → 1.33.

Upstream release review found React 19.2.8 only improves React Server Components decoding (unused here); plugin-react 6.0.4 fixes production-mode development refresh; and Vite+ 0.2.6 stabilizes type-aware linting, updates bundled build/format tools, improves task caching/workspace discovery, and removes a redundant build banner. No application code adaptation was required.

Dependency metadata contains no deprecation notices, npm audit reports zero vulnerabilities, and the dependency repositories are active. The mature base64-js and fast-sha256 packages remain appropriate for the synchronous, repeated SHA-256 algorithm that defines Hashpass output. GitHub Actions and the 2026 license year were already current; this repository has no git submodules.

Native npm run build, npm test (6 passing tests, 14 existing TODOs), and npm run lint passed. Canonical toast build, toast test, and toast lint also passed, including type checks, production bundling, formatting, Oxlint/tsgolint, and tagref.

Status: Ready

Fixes: N/A