Release 2.9.2: relock vite past its dev-server advisories (#109)

## Summary

Release 2.9.2. This is a lockfile refresh that moves vite from 8.2.2 to
8.3.4, clearing three advisories against vite's dev server
(GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw). vite
reaches this repo only through vitest, so it runs at test time and never
ships in the package.

Worked with Varun.

## Type of change

- [ ] Bug fix (no breaking change)
- [ ] New feature (no breaking change)
- [ ] Breaking change (existing callers must update)
- [x] Docs, tests, or internal maintenance only

## Public API

Unchanged. The version moves to 2.9.2 so the release is published; no
source file changes.

## Test plan

- `bun run lint`, `bun run typecheck`, `bun run test` (154 passed, 2
skipped).
- `osv-scanner` on `bun.lock`: no issues found. Before this change it
reported the three vite advisories.

Not done: no source changes, so no new tests.

## Checklist

- [ ] Tests cover the new behavior, and the suite passes locally (no new
behavior; the existing suite passes, 154 tests)
- [x] Lint, format, and type checks pass
- [ ] Docs and README examples updated if the public surface changed
(the public surface did not change)
- [x] No secrets, credentials, or personal data in the diff or the tests

Author: vvillait88

bun.lock

@@ -1,6 +1,6 @@
 {
   "name": "@agent-score/sdk",
-  "version": "2.9.1",
+  "version": "2.9.2",
   "description": "TypeScript client for the AgentScore APIs",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",