fix(deps): bump echarts to 6.1.0 to patch XSS vulnerability

Fixes GHSA-fgmj-fm8m-jvvx / CVE-2026-45249 — Lines series tooltip
rendering could execute raw HTML from series.data[i].name when no
custom tooltip.formatter is set.

Author: waleedlatif1

apps/sim/package.json

@@ -140,7 +140,7 @@
     "docx": "^9.6.1",
     "docx-preview": "^0.3.7",
     "drizzle-orm": "^0.45.2",
-    "echarts": "6.0.0",
+    "echarts": "6.1.0",
     "es-toolkit": "1.45.1",
     "ffmpeg-static": "5.3.0",
     "fluent-ffmpeg": "2.1.3",