fix(deps): exclude vulnerable vitest 4.0.x from @sim/testing peer range

Tighten the v4 arm of the peer range to >=4.1.0 <5.0.0 so the peer
requirement cannot be satisfied by the unpatched 4.0.x builds that
GHSA-5xrq-8626-4rwp affects.

Author: waleedlatif1

bun.lock

@@ -49,7 +49,7 @@
     "format:check": "biome format ."
   },
   "peerDependencies": {
-    "vitest": "^3.0.0 || ^4.0.0"
+    "vitest": "^3.0.0 || >=4.1.0 <5.0.0"
   },
   "devDependencies": {
     "@sim/tsconfig": "workspace:*",