Pin ws and ufo to older versions for JFrog compatibility

JFrog blocks packages < 14 days old. Override transitive deps:
- ws: 8.18.0 (from jsdom)
- ufo: 1.5.4 (from vitest -> mlly)

frontend/package.json

@@ -27,5 +27,9 @@
     "typescript": "^5.3.3",
     "vite": "^5.0.12",
     "vitest": "^1.3.1"
+  },
+  "overrides": {
+    "ws": "8.18.0",
+    "ufo": "1.5.4"
   }
 }