CI: bump overrides to clear high+ npm audit vulns

- axios ^1.16.0 (was ^1.15.0): patches GHSA-w9j2-pvgh-6h63 and a chain of
  prototype-pollution / SSRF / CRLF advisories affecting axios <=1.15.1.
  Reaches us via tronweb and @coinbase/cdp-sdk under wagmi/connectors.
- hono ^4.12.18 (was ^4.12.14): patches GHSA-9vqf-7f2p-gf9v plus four
  moderate JSX/JWT/Cache advisories. Reaches us via porto under wagmi/connectors.
- fast-uri ^3.1.2 (new): patches GHSA-q3j6-qgpj-74h6 and GHSA-v39h-62p7-jpjc.
  Reaches us via vite-plugin-dts → @microsoft/api-extractor → ajv (dev only).
- rpc-websockets/uuid ^11.1.1 (new): patches GHSA-w5hq-g745-h8pq.
  Reaches us via @solana/web3.js → rpc-websockets.

`npm audit` now reports 0 vulnerabilities at any level. 149/149 tests still
pass and the bundle builds.

Author: marceloceccon

package-lock.json

@@ -120,8 +120,12 @@
     "wagmi": "^2.14.0"
   },
   "overrides": {
-    "axios": "^1.15.0",
-    "hono": "^4.12.14",
+    "axios": "^1.16.0",
+    "hono": "^4.12.18",
+    "fast-uri": "^3.1.2",
+    "rpc-websockets": {
+      "uuid": "^11.1.1"
+    },
     "lodash": "^4.18.1",
     "follow-redirects": "^1.16.0",
     "esbuild": "^0.25.0"