fix(deps): resolve dependency vulnerabilities

[raphael-intugle]

Summary

Refresh vulnerable Python and npm dependency constraints and lockfiles without changing application source code.

Key changes

• Updated Python constraints/lockfile: setuptools >=83, snowflake-connector-python resolved to 4.7.3, thrift 0.24.0, and tornado 6.5.8.
• Updated npm overrides/lockfile: browserslist 4.28.9, fast-uri 3.1.7, and qs 6.16.0.
• Updated the corresponding uv and npm lockfile transitive metadata.

Verification

• Docusaurus build passed.
• TypeScript check passed.
• uv build passed.
• Python tests were not fully clean due existing MCP API collection errors/timeout and pre-existing lint findings.

Remaining upstream blockers

• image-size and nltk remain upstream-blocked because no fixed releases are currently available.