Track npm v12 compatibility

[crusty-voidzero]

Follow up on upcoming npm v12 behavior changes and make sure Vite+ is compatible before the default flips in July 2026.

Context:

• GitHub community discussion: https://github.com/orgs/community/discussions/198547
• npm v12 is expected to disable install scripts by default and tighten non-registry dependency handling (--allow-git / --allow-remote).

Suggested follow-up:

• Audit Vite+ install/bootstrap flow for any dependency install scripts that must run
• Check whether any git or remote URL dependencies are used directly or transitively in important workflows
• Verify fresh install / CI / bootstrap flows with npm 11.16+ and strict-allow-scripts enabled
• Document any required npm approve-scripts / allowlist guidance if needed

This is mainly a tracking issue so we can test early and avoid surprises when npm v12 lands.