LTS-4981 / LTS-5094: bump fast-uri + js-yaml security floors

- fast-uri: override floor 3.1.5 -> 3.1.6 (GHSA-5jgf-p345-68v8, CVE-2026-75931).
  3.1.5 was itself still inside the vulnerable range (>=3.1.3, <3.1.6) for a
  host-confusion bug in resolve() on scheme-relative references; patched
  floors per advisory are 2.4.5 / 3.1.6 / 4.1.3, resolves to 3.1.8 in-tree.
- js-yaml: version-scoped override floors bumped for both installed majors
  (GHSA-2883-xcg3-v3hh, CVE-2026-84375) - maxTotalMergeKeys doesn't count
  empty merge-source mappings, allowing O(N*K) CPU blowup:
  - js-yaml@3: ^3.15.1 -> ^3.15.2 (consumed by js-yaml-cloudformation-schema)
  - js-yaml@4: ^4.3.1 -> ^4.3.2 (direct + other transitive consumers)
  Kept the version-scoped override split from LTS-4699/4700 so the 3.x
  consumer isn't force-upgraded onto 4.x (safeLoad was removed in 4.x).

Also converted the remaining exact-pinned overrides (qs, jws,
fast-xml-builder, path-expression-matcher) to caret ranges - exact pins are
exactly how fast-uri's prior override re-aged into a vulnerable range.
Left `tmp` alone since it's covered by an unrelated open dependabot PR.

Verified via `npm ci` from a clean install + `npm ls fast-uri/js-yaml --all`:
the js-yaml 3.x consumer stays on 3.15.2 (not forced to 4.x), fast-uri
resolves to 3.1.8, and `npm audit` no longer flags either package.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: MihirR-BS

package-lock.json

@@ -27,17 +27,17 @@
     "mocha": "^10.8.2"
   },
   "overrides": {
-    "qs": "6.14.2",
-    "jws": "4.0.1",
+    "qs": "^6.14.2",
+    "jws": "^4.0.1",
     "fast-xml-parser": "^5.10.1",
     "basic-ftp": "^5.3.1",
-    "fast-uri": "^3.1.5",
+    "fast-uri": "^3.1.6",
     "brace-expansion@1": "^1.1.18",
     "brace-expansion@2": "^2.1.4",
-    "js-yaml@3": "^3.15.1",
-    "js-yaml@4": "^4.3.1",
-    "fast-xml-builder": "1.2.1",
-    "path-expression-matcher": "1.6.1",
+    "js-yaml@3": "^3.15.2",
+    "js-yaml@4": "^4.3.2",
+    "fast-xml-builder": "^1.2.1",
+    "path-expression-matcher": "^1.6.1",
     "tmp": "0.2.7",
     "esbuild": "^0.28.1",
     "serialize-javascript": "^7.0.3",