fix: patch vulnerabilities and bump outdated dependencies

[waldekmastykarz]

Pull Request Title

fix: patch vulnerabilities and bump outdated dependencies

Linked Issue

Supersedes #7620.

One PR = One Commit

This replacement contains one dependency-refresh commit and includes every change from #7620.

New Command = Five Files

N/A. This PR updates dependencies and the existing Zod compatibility helper only.

Main Branch Only

Targets upstream main.

Merge Conflicts

The branch is based on the latest upstream main.

Summary

• includes all changes from fix: patch vulnerabilities and bump outdated dependencies #7620
• updates cooldown-eligible direct dependencies: @inquirer/confirm, @inquirer/input, @inquirer/select, @azure/msal-node-extensions, and csv-parse
• updates eligible overrides for fast-xml-parser, @xmldom/xmldom, serialize-javascript, and follow-redirects
• resolves transitive advisories in @humanfs/node, brace-expansion, js-yaml, and undici
• preserves the Zod schema compatibility fix from fix: patch vulnerabilities and bump outdated dependencies #7620

Security status

npm audit reports one remaining high-severity node-forge advisory. Version 1.4.0 is the latest published version and npm reports no fix available.

Not auto-applied

• major direct updates: @azure/msal-node, @types/node, eslint-plugin-mocha, mocha, and typescript
• pre-release-only updates: @typescript-eslint/eslint-plugin and @typescript-eslint/parser
• major override updates: @xmldom/xmldom, uuid, swiper, diff, and jws

Validation

• npm run build — passed
• npm test — passed
• 16,216 tests passing
• 100% statement, branch, function, and line coverage