fix(state): bump vitest to ^4.1.0, matching monorepo convention (#5217)

Resolves Dependabot alerts #382/#377 (vitest UI arbitrary file read/execute, < 3.2.6). Supersedes PR #5212, which is stale relative to main's existing vitest ^4.1.0 bump elsewhere and would have regressed 25 other packages back to ^3.2.6.

Author: odinr

.changeset/module-state_bump-vitest.md

@@ -0,0 +1,5 @@
+---
+"@equinor/fusion-framework-module-state": patch
+---
+
+Internal: bump `vitest` from `^2.0.5` to `^4.1.0` (dev dependency, test runner only), matching the version already used across the rest of the monorepo. Resolves Dependabot security alerts for the Vitest UI server arbitrary file read/execute vulnerability (`< 3.2.6`).

packages/modules/state/package.json

@@ -73,6 +73,6 @@
     "happy-dom": "^20.8.9",
     "pouchdb-adapter-idb": "^9.0.0",
     "typescript": "^5.8.2",
-    "vitest": "^2.0.5"
+    "vitest": "^4.1.0"
   }
 }