chore(deps): bring main's rc-series bumps to v2/main (hono 2.x, vite 8.1.5) (#1881)

The 2.0.0-rc series shipped these dependency bumps to `main` only, so
`v2/main` was developing against older versions and would have met them
for the first time at the milestone merge.

- `@hono/node-server` ^1.19.14 -> ^2.0.12 (root, clients/web) — a major.
  v2.0.0's only breaking changes are dropping Node 18 (the repo already
  requires >=22.19.0) and removing the `@hono/node-server/vercel` adapter
  (unused here). The used surface — `serve()`, `serveStatic`, `ServerType`
  — is unchanged, so no source edits were needed.
- `vite` ^8.0.0 -> ^8.1.5 (root, clients/web) and ^8.0.16 -> ^8.1.5
  (clients/tui) — the security bumps from #1841.

`npm install` at the root (postinstall cascades into every client)
regenerated the three touched lockfiles. `npm run ci` passes.


Claude-Session: https://claude.ai/code/session_01YAt8rqxysNbhYWLhoRm3fU

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

package.json

@@ -74,7 +74,7 @@
     "postinstall": "node scripts/install-clients.mjs"
   },
   "dependencies": {
-    "@hono/node-server": "^1.19.14",
+    "@hono/node-server": "^2.0.12",
     "@modelcontextprotocol/client": "2.0.0-beta.5",
     "@modelcontextprotocol/core": "2.0.0-beta.5",
     "@modelcontextprotocol/ext-apps": "^1.7.4",
@@ -94,7 +94,7 @@
     "pino": "^9.14.0",
     "react": "^19.2.4",
     "undici": "^8.5.0",
-    "vite": "^8.0.0",
+    "vite": "^8.1.5",
     "yaml": "^2.9.0",
     "zod": "^4.3.6"
   },