chore: Remediate 1 Dependabot security alert (lockfile only)

[amanabiy]

Updates a transitive dependency to resolve 1 open security alert that had no auto-generated Dependabot PR. Lockfile-only change.

Alert addressed

• GHSA-3wwx-pv8p-q78v | undici 6.x | medium | 6.28.0 → 6.29.0 | https://github.com/cloudscape-design/theming-core/security/dependabot/185

How the change was made

Transitive dependency (not a direct dependency). Patched release applied via npm audit fix (lockfile splice only).

Merging this PR clears the 1 gap alert it covers.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.68%. Comparing base (189c514) to head (98607c4).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #217   +/-   ##
=======================================
  Coverage   97.68%   97.68%           
=======================================
  Files          54       54           
  Lines        1469     1469           
  Branches      273      273           
=======================================
  Hits         1435     1435           
  Misses         29       29           
  Partials        5        5           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.