chore(deps): bump vitest to 4.1.11 to clear audit advisories

npm audit fix failed with ERESOLVE: vitest, @vitest/browser,
@vitest/browser-playwright and @vitest/ui pin each other on exact peer
versions, so bumping them one at a time can never resolve. Move the whole
group to ^4.1.11 in a single install, which also pulls in the fixed vite,
postcss, nanoid and fflate, then let npm audit fix handle the rest
(brace-expansion, linkify-it, markdown-it, @xmldom/xmldom).

npm audit now reports 0 vulnerabilities, down from 12.

The lockfile also picks up the pending 4.0.1 -> 4.0.11 workspace version
sync for packages/core and packages/asciidoctor.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019Qwsmiypf4i2sNSM477p71

Author: ggrossetie