Fix development dependency vulnerabilities

[beefo]

Summary

• update vulnerable development dependencies to patched versions while retaining Node.js 18 compatibility
• keep webpack-dev-server on the 5.x line and override its sockjs UUID dependency to a patched 11.x release
• rebuild the committed bundle with the patched Babel toolchain
• document why the UUID override must remain while webpack-dev-server 5 depends on sockjs

Security result

• npm audit: 0 vulnerabilities
• npm audit --omit=dev: 0 vulnerabilities

This consolidates and supersedes Dependabot PRs #80, #81, #82, #83, #84, #86, and #88. It intentionally does not take the webpack-dev-server 6 update from #89 because that major version requires Node.js 22.15 or newer, while this package supports Node.js 18 and 20.

Testing

• npm ci
• npm test — 34 passing
• full Node and browser suite on Node.js 18.20.8 — 34 passing
• build and Node suite on Node.js 20.20.2 — 20 passing
• git diff --check