fix: bump undici and form-data to patch Dependabot alerts

Resolves 8 open Dependabot alerts:
- undici 7.24.4 -> 8.5.0 (override >=7.28.0): fixes 7 advisories incl.
  WebSocket DoS, SOCKS5 cross-origin routing, TLS validation bypass
- form-data 4.0.5 -> 4.0.6: fixes CRLF injection via multipart field names

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: riglar