chore(deps): bump vulnerable transitives to address Dependabot alerts (#14811)

chore(deps): bump vulnerable transitives to address dependabot alerts

Re-resolves four transitive dependencies within their existing semver
ranges to pull in versions that close the open Dependabot alerts:

- uuid 11.1.0 -> 11.1.1 (GHSA-w5hq-g745-h8pq)
- fast-uri 3.0.6 -> 3.1.2 (GHSA-q3j6-qgpj-74h6, GHSA-v39h-62p7-jpjc)
- fast-xml-builder 1.1.5 -> 1.2.0 (GHSA-45c6-75p6-83cc, GHSA-5wm8-gmm8-39j9)
- @babel/plugin-transform-modules-systemjs 7.27.1 -> 7.29.4 (GHSA-fv7c-fp4j-7gwp)

Lockfile-only change; no package.json or source modifications.

Author: osama-rizk