fix: loosen undici version to resolve npm audit warnings

[Cherry]

Currently, installing a lot of packages here result in npm audit warnings like this:

undici  7.0.0 - 7.4.0
undici Denial of Service attack via bad certificate data - https://github.com/advisories/GHSA-cxrh-j4jr-qwg3
fix available via `npm audit fix --force`
Will install @xmcl/modrinth@2.3.1, which is a breaking change
node_modules/undici
  @xmcl/modrinth  >=2.3.2
  Depends on vulnerable versions of undici
  node_modules/@xmcl/modrinth

While these specifically vulnerabilities are very unlikely to impact packages here, some companies have policies that prevent the use of packages with any npm audit warnings.

I've bumped the undici version to resolve these, and also loosened it a little. This should help reduce package sizes for large applications that all rely on undici, by allowing any compatible version with ^7.16.0.