fix(security): resolve critical sha.js and express/qs vulnerabilities

npm audit fix to patch critical sha.js and high-severity express/qs
vulnerabilities. Remaining lows are in the crypto-browserify chain.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: vveerrgg