fix(deps): resolve dependabot security alerts

* fix(deps): resolve dependabot security alerts

Bump vulnerable transitive dev-dependencies in yarn.lock:

- undici 6.23.0/6.27.0 -> 6.28.0, 7.28.0 -> 7.29.0 (14 alerts)
- postcss 8.4.49 -> 8.5.26 (4 alerts)
- nanoid 3.3.15 -> 3.3.18 (2 alerts)
- brace-expansion 2.1.1 -> 2.1.4, 5.0.6 -> 5.0.9 (2 alerts)
- js-yaml 4.3.0 -> 4.3.1 (1 alert)
- uuid 7.0.3 -> 11.1.1 (1 alert)

Also picked up from `yarn npm audit`: ajv 6.12.6 -> 6.15.0 and
8.17.1 -> 8.20.0, tar 7.5.19 -> 7.5.22, basic-ftp 5.3.0 -> 5.3.1,
@ungap/structured-clone 1.3.0 -> 1.3.3.

Most bumps are plain `yarn up -R` within existing semver ranges.
Three narrow `resolutions` entries cover deps whose dependents pin
a range that cannot reach the patched version (postcss via
@expo/metro-config, undici via release-it, uuid via xcode).

No source, config, or CI changes. Tests, typecheck, lint and build
all pass.

* chore(deps): regenerate yarn.lock

Author: JairajJangle

package.json

@@ -138,6 +138,11 @@
       "optional": true
     }
   },
+  "resolutions": {
+    "postcss@~8.4.32": "^8.5.23",
+    "undici@6.23.0": "^6.28.0",
+    "uuid@^7.0.3": "^11.1.1"
+  },
   "packageManager": "yarn@4.9.2",
   "jest": {
     "preset": "react-native",