chore(deps): bump cors in /reference-apps/typescript-api-first

Bumps [cors](https://github.com/expressjs/cors) from 2.8.5 to 2.8.6.
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

---
updated-dependencies:
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

reference-apps/typescript-api-first/package-lock.json

@@ -21,7 +21,7 @@
   "license": "MIT",
   "dependencies": {
     "amqplib": "^0.10.3",
-    "cors": "^2.8.5",
+    "cors": "^2.8.6",
     "express": "^5.2.1",
     "helmet": "^8.1.0",
     "js-yaml": "^4.1.1",