chore(deps): clear the production audit failures blocking CI (#92)

* chore(deps): clear the production audit failures blocking CI

Advisories published after the last main run fail `npm run audit:prod`:
proxy-addr (critical) and fast-uri (moderate) arrive transitively, and the
MCP SDK needed a minor bump. Move the SDK to ~1.32.1 and override fast-uri
to ^3.1.8; audit reports zero production vulnerabilities again.

Co-authored-by: QoderAI (Qwen 3.8 Max) <qoder_ai@qoder.com>

* fix(deps): pin jest to 30.3.0 to restore the coverage job

jest drifted to 30.5.2 during the audit fix, pulling babel-jest 30.5.2
with babel-plugin-istanbul@8 and test-exclude@7, which break against the
hoisted minimatch@10 and fail every suite when istanbul is loaded. Pin
jest and jest-environment-jsdom to 30.3.0 so babel-jest stays at 30.3.0,
babel-plugin-istanbul at 7.x and test-exclude at 6.x.

Co-authored-by: QoderAI (Qwen 3.8 Max) <qoder_ai@qoder.com>

---------

Co-authored-by: QoderAI (Qwen 3.8 Max) <qoder_ai@qoder.com>

Author: luoxuanzao