chore: update vulnerable npm dependencies

[MiguelMedeiros]

Summary

• Updates runtime axios to ^1.18.1 to clear the open high-severity Axios advisories.
• Refreshes npm lockfile dependencies with npm audit fix.
• Adds an npm override for js-yaml@4.2.0 to resolve the remaining transitive Jest/Istanbul advisory without downgrading Jest.

Verification

• npm audit --audit-level=moderate
• npm run build
• rm -rf dist && npm test -- --runInBand

Result: audit reports 0 vulnerabilities; TypeScript build passes; 19 test suites / 54 tests pass.