chore: bump vitest 4.0.18 → 4.1.0, @types/node 25.4.0 → 25.5.0

- Fix recover-db-fallback test: remove conflicting vi.unmock before vi.mock
  (vitest 4.1 changed unmock/mock ordering behavior)
- All 705 tests pass, 0 vulnerabilities

package.json

@@ -29,17 +29,17 @@
   "devDependencies": {
     "@types/compression": "^1.8.1",
     "@types/express": "^5.0.6",
-    "@types/node": "^25.4.0",
+    "@types/node": "^25.5.0",
     "@types/nodemailer": "^7.0.11",
     "@types/pg": "^8.18.0",
     "@types/supertest": "^7.2.0",
     "@types/swagger-jsdoc": "^6.0.4",
-    "@vitest/coverage-v8": "^4.0.18",
+    "@vitest/coverage-v8": "^4.1.0",
     "supertest": "^7.2.2",
     "terser": "^5.46.0",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.18"
+    "vitest": "^4.1.0"
   },
   "type": "module"
 }

src/__tests__/recover-db-fallback.test.ts

@@ -2,8 +2,7 @@ import { describe, it, expect, vi, beforeEach } from "vitest";
 
 // Unmock keys to use real getAllKeys (but we'll mock it ourselves)
 vi.unmock("../services/keys.js");
-vi.unmock("../services/verification.js");
-vi.unmock("../services/email.js");
+// verification.js and email.js are mocked below
 
 vi.mock("../services/db.js", () => ({
   default: { query: vi.fn(), connect: vi.fn(), on: vi.fn(), end: vi.fn() },