chore: promote vitest/hoisted-apis-on-top and typescript/no-misused-spread to errors

Both rules were previously oxlint default warnings; now that the codebase
is clean they should fail CI rather than be silently re-introduced.

Amp-Thread-ID: https://ampcode.com/threads/T-019e761f-f76a-771b-a58e-7fa3aa25eddf
Co-authored-by: Amp <amp@ampcode.com>

.oxlintrc.json

@@ -84,6 +84,8 @@
     "typescript/no-unused-vars": "off",
     "unicorn/no-empty-file": "off",
     "vitest/require-mock-type-parameters": "off",
+    "vitest/hoisted-apis-on-top": "error",
+    "typescript/no-misused-spread": "error",
     "vitest/consistent-each-for": [
       "error",
       {