chore(deps): upgrade Vite+ to 0.3.1 and Vitest to 4.1.11

[fengmk2]

Upgrade vite-plus and the vite alias from 0.2.6 to 0.3.1. Update vitest and @vitest/coverage-istanbul from 4.1.10 to 4.1.11. Dependabot now groups these packages into one update.

The release includes Rolldown 1.2.7 and Oxc 0.148.0. Rolldown PR #10809 fixes the default-parameter scope analysis reported in issue #10779. This error could prevent removal of a dead dynamic import from a server build. The existing production branch-pruning regression passes with the released version.

The bundled tsdown version changes to 0.23.0. The package configurations use deps.neverBundle and select dts.generator explicitly. They preserve the previous dependency-subpath resolution behavior.

Oxlint changes from 1.75.0 to 1.81.0. Since 1.79.0, no-redeclare also checks ES modules (PR #25691). Two existing next/document declaration merges therefore need narrow ignores. The upgrade also reports an unused underscore parameter (PR #25663) and React diagnostics that fail with denyWarnings: true.

The lint fixes derive benchmark controls from URL state, reset component state when its input changes, and assert hook values inside test components. Narrow exceptions preserve router ref timing, committed snapshots, client-only mount behavior, and Next.js legacy Link ref handling. Formatting follows the bundled Oxfmt version.

The error overlay resets frame visibility when the error ID changes, without remounting the dialog. This preserves keyboard focus on the pagination buttons, as Next.js does. A browser regression test checks consecutive Enter presses in both directions and frame visibility after each error change. The test fails with the earlier key={current.id} implementation and passes with this fix.

The first CI run passed every browser test and integration shard. One unit test exceeded its five-second limit while starting a Vite server. Move tests/dynamic-requests-build.test.ts to the integration project, which already provides a 30-second limit and bounded parallelism. All 46 tests pass locally without assertion changes.

The latest fork CI run passes every unit shard, integration shard, and browser project, including the focus regression. Performance and security checks also pass. Local checks, the package build, 16 overlay browser tests, and 14 overlay unit tests pass. One existing browser test remains skipped.

All ten example builds pass. Their deployment jobs fail because the fork has no Cloudflare credentials. Submitted upstream as cloudflare/vinext#3215.