ci: ignore GHSA-67mh-4wv8-2f99

[ppvg]

GHSA-67mh-4wv8-2f99 only affects esbuild's own built-in dev server, not vite's dev server which this project uses.

NB: Vite is our only dependency that depends on esbuild:

pnpm why -r esbuild

Legend: production dependency, optional only, dev only

/home/ppvg/code/minvws/nl-rdo-manon/docs (PRIVATE)

devDependencies:
@sveltejs/adapter-static 3.0.8
└─┬ @sveltejs/kit 2.17.2 peer
  ├─┬ @sveltejs/vite-plugin-svelte 5.0.3 peer
  │ ├─┬ @sveltejs/vite-plugin-svelte-inspector 4.0.1
  │ │ └─┬ vite 6.1.0 peer
  │ │   └── esbuild 0.24.2
  │ ├─┬ vite 6.1.0 peer
  │ │ └── esbuild 0.24.2
  │ └─┬ vitefu 1.0.5
  │   └─┬ vite 6.1.0 peer
  │     └── esbuild 0.24.2
  └─┬ vite 6.1.0 peer
    └── esbuild 0.24.2
@sveltejs/kit 2.17.2
├─┬ @sveltejs/vite-plugin-svelte 5.0.3 peer
│ ├─┬ @sveltejs/vite-plugin-svelte-inspector 4.0.1
│ │ └─┬ vite 6.1.0 peer
│ │   └── esbuild 0.24.2
│ ├─┬ vite 6.1.0 peer
│ │ └── esbuild 0.24.2
│ └─┬ vitefu 1.0.5
│   └─┬ vite 6.1.0 peer
│     └── esbuild 0.24.2
└─┬ vite 6.1.0 peer
  └── esbuild 0.24.2
@sveltejs/vite-plugin-svelte 5.0.3
├─┬ @sveltejs/vite-plugin-svelte-inspector 4.0.1
│ └─┬ vite 6.1.0 peer
│   └── esbuild 0.24.2
├─┬ vite 6.1.0 peer
│ └── esbuild 0.24.2
└─┬ vitefu 1.0.5
  └─┬ vite 6.1.0 peer
    └── esbuild 0.24.2
vite 6.1.0
└── esbuild 0.24.2

/home/ppvg/code/minvws/nl-rdo-manon/examples/vite (PRIVATE)

devDependencies:
vite 6.1.0
└── esbuild 0.24.2

...so this PR can be reverted after updating vite to 6.2, which will bump its esbuild dependency to 0.25.

Edit: at the moment the CI job still fails due to a bug in pnpm 9.6. Recents versions of pnpm 9 and pnpm 10 do correctly apply "ignoreGhsas". I've opened a PR to update pnpm: #779.