Fix portable Vitest aliases

[kriptoburak]

Summary

• Replace local machine absolute Vitest aliases with paths resolved from the config file
• Refresh the lockfile so the test runner uses Vitest 3.2.6, clearing the previous critical Vitest audit finding

Validation

• npm test
• npm run typecheck
• npm pack --dry-run
• git diff --check
• npm audit --omit=peer --json

Note: npm audit still reports 1 low esbuild dev-server advisory through the current Vite toolchain.