chore(html-element-web): bump dompurify to 3.4.12

[r0b1n]

Pull request type

Dependency changes (any modification to dependencies in package.json)

---

Description

Bumped dompurify dependency in html-element-web from ^3.4.11 to ^3.4.12 to incorporate latest security fixes.

• Updated package.json dependency
• Added Security entry under [Unreleased] in CHANGELOG.md
• Updated pnpm-lock.yaml via pnpm install

[github-actions]

AI Code Review

✅ Approved — no issues found

---

What was reviewed

File	Change
packages/pluggableWidgets/html-element-web/CHANGELOG.md	Added ### Security entry under [Unreleased] noting dompurify 3.4.12
packages/pluggableWidgets/html-element-web/package.json	Bumped dompurify from ^3.4.11 to ^3.4.12

Skipped (out of scope): pnpm-lock.yaml

---

Positives

• CHANGELOG entry is correctly placed under [Unreleased] using the ### Security category — appropriate for a security-fix dependency bump.
• Version constraint uses ^ (semver-compatible) and the patch was bumped precisely to 3.4.12 rather than a broader range expansion.
• No runtime code changes — blast radius is minimal; the lockfile confirms the resolved version moved from 3.4.11 to 3.4.12 as expected.
• PR title follows conventional-commit format (chore(html-element-web): ...) and the description clearly states the motivation.