chore(deps): bump esbuild override to >=0.28.1 (GHSA-gv7w-rqvm-qjhr)

The existing pnpm override floor (>=0.25.0) still resolved to a vulnerable
esbuild. Bump to >=0.28.1 so the transitive esbuild (via better-auth >
drizzle-kit) clears the GHSA-gv7w-rqvm-qjhr high advisory. pnpm audit --prod now
reports no known vulnerabilities.

Author: Medformatik