refactor: vendor marked + dompurify 到项目内，实现零外部依赖

- marked (77行 ESM) + dompurify (1398行 ESM) 复制到 src/vendor/
- 包含 LICENSE 文件和类型声明（dompurify 类型去除 trusted-types 外部依赖）
- 移除 package.json 中 marked/dompurify/@types/dompurify 依赖
- 移除 electron-builder files 配置中的 node_modules 引用
- tsconfig.json include 新增 src/vendor/**/*.d.ts

package.json

@@ -27,9 +27,7 @@
       "dist/**/*",
       "assets/**/*",
       "!node_modules/**/*",
-      "node_modules/sql.js/**/*",
-      "node_modules/marked/**/*",
-      "node_modules/dompurify/**/*"
+      "node_modules/sql.js/**/*"
     ],
     "extraResources": [
       {
@@ -61,7 +59,6 @@
     }
   },
   "devDependencies": {
-    "@types/dompurify": "^3.0.5",
     "@types/node": "^20.17.0",
     "electron": "^33.4.11",
     "electron-builder": "^25.1.8",
@@ -69,8 +66,6 @@
     "vite": "^5.4.0"
   },
   "dependencies": {
-    "dompurify": "^3.4.0",
-    "marked": "^18.0.2",
     "sql.js": "^1.11.0"
   }
 }