Reduce critical/high vulnerabilities from audit

[anthuanvasquez]

Context

pnpm audit --prod --audit-level high reports critical/high vulnerabilities in transitive dependencies.

Problem

Current dependency graph includes vulnerable packages (examples: simple-git, fast-xml-parser, handlebars, node-forge, vite paths).

Proposed Solution (Phased)

Wave A (low-risk)

• Patch/minor updates where safe
• Re-run audit after each package group

Wave B (controlled upgrades)

• Upgrade framework ecosystem where needed (Nuxt/UI/LangChain stack)
• Validate runtime and test compatibility

Acceptance Criteria

• 0 critical vulnerabilities
• Significant reduction of high vulnerabilities
• pnpm lint and pnpm test still pass
• Documented upgrade notes and risks

Notes

Apply small, reviewable commits to isolate breakages quickly.