fix(security): bump dompurify to patch XSS and prototype pollution issues

Upgrades dompurify from 3.4.1 to 3.4.12 to pick up upstream sanitization
bypass and prototype pollution fixes released in the 3.4.x line.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: claude

package-lock.json

@@ -91,7 +91,7 @@
         "classnames": "^2.5.1",
         "dayjs": "^1.11.13",
         "deepsignal": "^1.5.0",
-        "dompurify": "^3.4.1",
+        "dompurify": "^3.4.12",
         "get-xpath": "^3.2.0",
         "goober": "^2.1.16",
         "lodash-es": "^4.18.1",