fix(deps): bump undici, js-yaml and @babel/core to patched versions

Resolves the outstanding Dependabot alerts in device_page by pinning the
affected transitive dependencies to their first patched versions via pnpm
overrides — without the major tooling upgrades:

- undici 7.25.0 -> 7.28.0 (1 high, 1 medium advisory)
- js-yaml 4.1.0 -> 4.2.0 (medium)
- @babel/core 7.27.4 -> 7.29.6 (low)

All bumps stay within the current major versions, so there are no API or
toolchain changes — just the security patches.

Author: BenJule

src/slic3r/GUI/DeviceWeb/device_page/package.json

@@ -45,5 +45,12 @@
   "packageManager": "pnpm@10.12.1+sha512.f0dda8580f0ee9481c5c79a1d927b9164f2c478e90992ad268bbb2465a736984391d6333d2c327913578b2804af33474ca554ba29c04a8b13060a717675ae3ac",
   "optionalDependencies": {
     "lightningcss-win32-x64-msvc": "^1.32.0"
+  },
+  "pnpm": {
+    "overrides": {
+      "undici": "7.28.0",
+      "js-yaml": "4.2.0",
+      "@babel/core": "7.29.6"
+    }
   }
 }