feat(import): harden workbook parser boundaries

apps/web/package.json

@@ -7,7 +7,8 @@
     "build": "next build",
     "start": "next start -p 3100",
     "lint": "next lint",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --project tsconfig.typecheck.json --noEmit",
+    "test:unit": "vitest run",
     "test:e2e": "playwright test"
   },
   "dependencies": {
@@ -43,12 +44,12 @@
     "recharts": "^3.7.0",
     "tailwind-merge": "^2.6.0",
     "three": "^0.183.2",
-    "xlsx": "^0.18.5",
     "zod": "^3.23.8"
   },
   "devDependencies": {
     "@capakraken/tsconfig": "workspace:*",
     "@playwright/test": "^1.49.1",
+    "@vitest/coverage-v8": "^2.1.9",
     "@types/dompurify": "^3.2.0",
     "@types/node": "^22.10.2",
     "@types/react": "^19.0.6",
@@ -58,6 +59,7 @@
     "autoprefixer": "^10.4.20",
     "postcss": "^8.4.49",
     "tailwindcss": "^3.4.17",
-    "typescript": "^5.6.3"
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.9"
   }
 }