Add Vite CVE-2025-31125 single-container lab

[yangyu0330]

What changed

• Added a deterministic single-container Vite 5.4.15 lab for CVE-2025-31125.
• Added a PowerShell PoC that verifies the normal request is blocked and the ?raw?import bypass exposes the marker.
• Added Korean reproduction, mitigation, detection, scoring, screenshots, and a six-page PDF version of the README.
• Added the Vite entry to the repository index.

Why

This provides a locally bound, immediately verifiable assignment lab for CVE-2025-31125 without external databases or supporting services.

Validation

• harness.ps1 validate -Lab Vite/CVE-2025-31125
• harness.ps1 verify -Lab Vite/CVE-2025-31125 -TargetUrl http://127.0.0.1:5173
• Manual docker compose up -d --build and poc/run.ps1
• Confirmed exactly one Compose service
• Baseline request: HTTP 403
• PoC request: HTTP 200 with the expected marker
• External PoC target rejected with exit code 1
• PDF parsed successfully: 6 pages, required sections present