chore: bump vitest 4.0.18 → 4.1.0, @types/node 25.4.0 → 25.5.0

- Fix recover-db-fallback test: remove conflicting vi.unmock before vi.mock
  (vitest 4.1 changed unmock/mock ordering behavior)
- All 705 tests pass, 0 vulnerabilities

src/__tests__/recover-db-fallback.test.ts

@@ -2,8 +2,7 @@ import { describe, it, expect, vi, beforeEach } from "vitest";
 
 // Unmock keys to use real getAllKeys (but we'll mock it ourselves)
 vi.unmock("../services/keys.js");
-vi.unmock("../services/verification.js");
-vi.unmock("../services/email.js");
+// verification.js and email.js are mocked below
 
 vi.mock("../services/db.js", () => ({
   default: { query: vi.fn(), connect: vi.fn(), on: vi.fn(), end: vi.fn() },