fix: resolve critical vulnerabilities and upgrade Docker base image

Security Updates:
- Update protobufjs 7.5.4→7.5.6 (CVE-2026-41242 RCE fix)
- Update handlebars 4.7.8→4.7.9 (CVE-2026-33937 template injection)
- Update form-data 2.3.3→4.0.5 (CVE-2025-7783 critical fix)
- Update winston 3.4.0→3.19.0, express 4.22.1→5.2.1
- Update helmet 7.2.0→8.1.0, bcrypt 5.1.1→6.0.0
- Update validator, unzipper, supertest to latest secure versions

Dependency Management:
- Add explicit versions for protobufjs, handlebars, form-data to package.json
- Force secure versions of transitive dependencies via dependency pinning
- Prevent vulnerable versions from being pulled by parent packages

Infrastructure:
- Upgrade Docker base image: node:24-alpine3.21 → node:24-alpine3.23
- Improve container security with latest Alpine Linux patches

Signed-off-by: DeepakNemad <deepak.nemade@ayanworks.com>

Author: DeepakNemad

package.json

@@ -128,9 +128,9 @@
     "winston-daily-rotate-file": "^5.0.0",
     "winston-elasticsearch": "0.16.0",
     "xml-js": "^1.6.11",
-    "protobufjs": "^7.5.5",
+    "protobufjs": "^7.5.6",
     "handlebars": "^4.7.9",
-    "form-data": "^4.0.4"
+    "form-data": "^4.0.5"
   },
   "devDependencies": {
     "@nestjs/cli": "catalog:",