Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Philippe Serhal <philippe.serhal@netlify.com>

Before:
```
@nuxt/devtools  <2.6.4
Severity: moderate
Nuxt DevTools vulnerable to cross-site scripting (XSS) - GHSA-xmq3-q5pm-rp26
fix available via `npm audit fix`
node_modules/@nuxt/devtools

glob  10.2.0 - 10.4.5
Severity: high
glob CLI: Command injection via -c/--cmd executes matches with shell:true - GHSA-5j98-mcp5-4vw2
fix available via `npm audit fix`
node_modules/glob

js-yaml  4.0.0 - 4.1.0
Severity: moderate
js-yaml has prototype pollution in merge (<<) - GHSA-mh29-5h37-fv8m
fix available via `npm audit fix`
node_modules/js-yaml

node-forge  <=1.3.1
Severity: high
node-forge has ASN.1 Unbounded Recursion - GHSA-554w-wpv2-vw27
node-forge is vulnerable to ASN.1 OID Integer Truncation - GHSA-65ch-62r8-g69g
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization - GHSA-5gfm-wpxj-wjgq
fix available via `npm audit fix`
node_modules/node-forge

playwright  <1.55.1
Severity: high
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate - GHSA-7mvr-c777-76hp
fix available via `npm audit fix`
node_modules/playwright

vite  6.0.0 - 6.4.0 || 7.1.0 - 7.1.10
Severity: moderate
vite allows server.fs.deny bypass via backslash on Windows - GHSA-93m4-6634-74q7
vite allows server.fs.deny bypass via backslash on Windows - GHSA-93m4-6634-74q7
fix available via `npm audit fix`
node_modules/vite
packages/vite-plugin/node_modules/vite

6 vulnerabilities (3 moderate, 3 high)
```

After `npm audit fix`:

```
$ npm audit

audited 1309 packages in 10s

found 0 vulnerabilities
```

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Philippe Serhal <philippe.serhal@netlify.com>

* fix: prevent multiple instances of the tracer provider

* fix: fetch property directly

* fix: typo in import

* fix: allow active spans to be passed in as an option

* fix: use original span name, do not override

Co-authored-by: token-generator-app[bot] <82042599+token-generator-app[bot]@users.noreply.github.com>