chore(tools,adapter-vite,deps): 0.41.1 patch batch — shared path constants, fs readJson helper, hygiene secret/binary scans, no-sloppy-imports doc, vite 8.0.16

- adapter-vite: 'dist'/'.openElement' magic strings converge on
  internal/paths.ts DEFAULT_OUT_DIR/OPEN_ELEMENT_DIR (Q-F1)
- tools/lib/fs.ts: add readText/readJson; 10 tools files migrated off
  JSON.parse(await Deno.readTextFile(...)) (Q-F3)
- repo-hygiene gate: credential-file and credential-content scans plus a
  1 MiB tracked-binary rule with intentional-asset exemptions (DEP-B3)
- CONTRIBUTING: record why no-sloppy-imports is disabled (Q-F5)
- vite 8.0.10 -> 8.0.16 across root and examples; flatten the plugin array
  in www/vite.config.ts for the tightened PluginOption types (DEP-A2)
- stale merged branches pruned (DEP-B4)

Author: DevBot

CONTRIBUTING.md

@@ -78,6 +78,11 @@ For release work, also run the release gates listed in
 - Use `createLogger()` for logging where package code already has logger
   access.
 - Reference ADR numbers when comments explain architectural decisions.
+- `no-sloppy-imports` is disabled in the root `deno.json`: Deno's rule
+  requires explicit `.ts` extensions on relative imports, and this repository
+  deliberately uses extension-less relative imports (Bundler-style resolution,
+  matching the published npm artifacts). Keep new imports extension-less;
+  do not re-enable the rule without an ADR.
 
 ## Release Process
 

deno.json

@@ -15,7 +15,7 @@
     "@std/assert": "jsr:@std/assert@^1.0.0",
     "hono": "npm:hono@^4.12",
     "@hono/vite-dev-server": "npm:@hono/vite-dev-server@^0.25.3",
-    "vite": "npm:vite@8.0.10",
+    "vite": "npm:vite@8.0.16",
     "@mdx-js/mdx": "npm:@mdx-js/mdx@^3.1.1",
     "@mdx-js/rollup": "npm:@mdx-js/rollup@^3.1.1",
     "typescript": "npm:typescript@^5.9.0",

deno.lock

@@ -1,16 +1,16 @@
 {
   "schemaVersion": 1,
-  "measuredAt": "2026-07-11T03:43:02.307Z",
+  "measuredAt": "2026-07-26T11:21:09.570Z",
   "environment": {
     "deno": "2.9.1",
     "os": "darwin",
     "arch": "aarch64"
   },
   "web": {
-    "buildTimeMs": 2379,
-    "pages": 210,
-    "generatedHtmlBytes": 20997239,
-    "initialJavaScriptBytes": 1652424
+    "buildTimeMs": 1701,
+    "pages": 142,
+    "generatedHtmlBytes": 12500605,
+    "initialJavaScriptBytes": 2225514
   },
   "mastodonStress": {
     "startRssMb": 39,