chore(deps): bump vitest to ^4.1.0 in packages/toolbar

[kparkinson-ld]

Description

What does this PR do?

Remediates a CRITICAL Dependabot security alert by bumping vitest in packages/toolbar from ^4.0.18 to ^4.1.0 (patched version). The lockfile resolves to vitest@4.1.10.

This is a focused, single-package bump. An existing Dependabot group PR (#641) also reaches vitest@4.1.0, but it bundles unrelated vite/lodash/qs bumps and its ci-build fails on 10 e2e tests; this PR isolates just the security-relevant vitest change so CI can go green.

• packages/toolbar/package.json: "vitest": "^4.0.18" → "^4.1.0"
• pnpm-lock.yaml: regenerated (vitest@4.1.10; @vitest/coverage-v8 and vite unchanged)

Type of Change

• 🔨 Chore (updating grunt tasks, build process, etc; no production code change)

---

Screenshots/Videos

N/A — dev-dependency bump, no user-facing change. Verified locally: all 840 unit tests pass (pnpm test) on Node 23.5.0.

---

Link to Devin session: https://app.devin.ai/sessions/ffec3ecd50014ff9a4379c4259fd4cce
Requested by: @kparkinson-ld

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring