Upgrade website dependencies

[samfreund]

Description

This PR updates the website deps to use Vite 8 and rolldown. This is partially because of a security advisory, as we host the website on our VPS. This PR also adjusts links so they go straight to the file, instead of the public directory, which is unnecessary.

Meta

Merge checklist:

• Pull Request title is short, imperative summary of proposed changes
• The description documents the what and why, including events that led to this PR
• If this PR changes behavior or adds a feature, user documentation is updated
• If this PR touches photon-serde, all messages have been regenerated and hashes have not changed unexpectedly
• If this PR touches configuration, this is backwards compatible with all settings going back to the previous seasons's last release (seasons end after champs ends)
• If this PR touches pipeline settings or anything related to data exchange, the frontend typing is updated
• If this PR addresses a bug, a regression test for it is added
• If this PR adds a dependency, the license has been checked for compatibility and steps taken to follow it

[mcm001]

To be clear -- do the CVEs apply to statically hosted websites? We just serve static files so I don't see the threat vector

[samfreund]

To be clear -- do the CVEs apply to statically hosted websites? We just serve static files so I don't see the threat vector

I think it probably doesn't apply to us? I'm not 100% confident tho which is why I mentioned it. Regardless, we do want Vite 8

[GrahamSH-LLK]

To be clear -- do the CVEs apply to statically hosted websites? We just serve static files so I don't see the threat vector

They absolutely do not :)