Bump ejs to ^3.1.10 to fix CVE-2024-33883

Summary:
Upgrade ejs dependency in node/package.json from ^2.4.2 to ^3.1.10 to
remediate GHSA-ghr5-ch3p-vcr6 (CVE-2024-33883), a medium-severity
prototype pollution vulnerability in ejs < 3.1.10.

The app only uses ejs as an Express view engine (app.set + res.render),
which is fully compatible with ejs 3.x — no code changes required.

Reviewed By: shreeshyadav

Differential Revision: D99690816

fbshipit-source-id: a0107d92515d3bdc20a38e36e3247f722dfe0962

Author: Vinayak Gupta

node/package.json

@@ -17,7 +17,7 @@
   "dependencies": {
     "body-parser": "^1.15.0",
     "config": "^1.20.4",
-    "ejs": "^2.4.2",
+    "ejs": "^3.1.10",
     "express": "^4.13.4",
     "request": "^2.72.0"
   },