chore: address Trivy production dependency vulnerabilities (#62)

Bump vulnerable production dependencies/overrides and refresh package-lock.json to clear Plugins develop Trivy findings.

Co-authored-by: Cursor <cursoragent@cursor.com>

fix esbuild dependencies

fixes qs alerts

vulnerabilties fix: update brace-expansion

fix security alerts (#61)

fix cve: GHSA-r4q5-vmmm-2653

fix axios cve

updated lodash to fix sec issues

Update minimatch and fast-xml-parser

HCK-7662: enable the feature for primary keys in nested attributes (#58)