chore: address Trivy production dependency vulnerabilities

Bump vulnerable production dependencies/overrides and refresh package-lock.json to clear Plugins released Trivy findings.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: bigorn0

package-lock.json

@@ -160,8 +160,8 @@
         "node-uuid": "1.4.7"
     },
     "overrides": {
-        "fast-uri": "3.1.4",
+        "fast-uri": "3.1.5",
         "minimatch": "10.2.4",
         "brace-expansion": "5.0.8"
     }
-}
+}