Security: @frctl/fractal depends on vorpal which is unmaintained

[patch0]

This leads to a number of dependabot alerts in downstream repos, which would be good to see fixed.

There is an open issue but progress has been slow. Maybe we need to move away from Fractal to something else?