fix(website): resolve Dependabot security alerts (serialize-javascript, undici, svgo, minimatch, dompurify)

- serialize-javascript: 7.0.3 (RCE via RegExp.flags/toISOString)
- undici: 7.24.1 (WebSocket/server_max_window_bits, permessage-deflate, CRLF, smuggling, DoS)
- svgo: 3.3.3 (Billion Laughs DoS in DOCTYPE)
- minimatch: 10.2.3 (ReDoS GLOBSTAR and extglobs)
- dompurify: 3.3.3 (XSS)

Added resolutions (yarn) and overrides (npm) to pin patched versions.
npm audit and lockfiles regenerated; 0 vulnerabilities.

Made-with: Cursor

Author: danbaruka

website/package-lock.json

@@ -62,14 +62,22 @@
     "schema-utils": "4.3.3",
     "node-forge": "1.3.3",
     "qs": "6.14.2",
-    "minimatch": "10.2.1"
+    "minimatch": "10.2.3",
+    "serialize-javascript": "7.0.3",
+    "undici": "7.24.1",
+    "svgo": "3.3.3",
+    "dompurify": "3.3.3"
   },
   "overrides": {
     "ajv": "8.18.0",
     "ajv-keywords": "5.1.0",
     "schema-utils": "4.3.3",
     "node-forge": "1.3.3",
     "qs": "6.14.2",
-    "minimatch": "10.2.1"
+    "minimatch": "10.2.3",
+    "serialize-javascript": "7.0.3",
+    "undici": "7.24.1",
+    "svgo": "3.3.3",
+    "dompurify": "3.3.3"
   }
 }