Fix npm audit vulnerabilities

[anmho]

Summary

• refresh package-lock transitive dependencies with npm audit fix
• reduce npm audit findings from the docs/generation toolchain while keeping SDK source unchanged

Verification

• npm audit --audit-level=moderate
  • remaining: postman-to-openapi -> marked has no fix available
  • remaining: current Mintlify previewing stack still pulls vulnerable qs through express
• npm run build
• npm test