chore(deps): batch vscode security dependency updates

[mostafa]

Summary

• Rolls up Dependabot PRs chore(deps-dev): bump undici from 7.28.0 to 7.29.0 in /editors/vscode #439 (undici 7.29.0), build(deps): bump brace-expansion from 5.0.8 to 5.0.9 in /editors/vscode #441 (brace-expansion 5.0.9), and build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /editors/vscode #443 (fast-uri 3.1.5) into one merge for editors/vscode.
• Raises the npm override floors to undici ^7.29.0 and brace-expansion ^5.0.9 so installs stay on the patched range.
• Clears Dependabot alerts #54–#60 (undici, brace-expansion, fast-uri).
• Leaves rusqlite 0.40.1 (chore(deps): bump rusqlite from 0.39.0 to 0.40.1 #234) and tikv-jemallocator 0.7.0 (chore(deps): bump tikv-jemallocator from 0.6.1 to 0.7.0 #425) open: same holdbacks as the prior batch.

Closes #439, closes #441, closes #443.

Test plan

• npm ci in editors/vscode (0 vulnerabilities)
• npm ls undici brace-expansion fast-uri shows 7.29.0 / 5.0.9 / 3.1.5
• npm run compile in editors/vscode
• CI green