FIX: Remove follow-redirects transitive dependency

[amoore108]

Part of JIRA: https://bbc.atlassian.net/browse/WS-2453

Summary

• Removes wait-on and webpack-dev-server which contained the follow-redirects transitive dependency. Both of these dependencies are no longer required by the Next.js app
• Removes usage of webpack-dev-server in the webpack config. This won't do anything as its not used anymore, but just resolves the import error from the removal of webpack-dev-server
• Resolves https://github.com/bbc/simorgh/security/dependabot/238

Testing

1. List the steps required to test this PR.

Useful Links

• Coding Standards
• Repository use guidelines
• Add Links to useful resources related to this PR if applicable.

[Copilot]

Pull request overview

This PR removes dependencies associated with follow-redirects from the root Simorgh package lock and development dependencies, aiming to resolve a Dependabot security alert.

Changes:

• Removed wait-on and webpack-dev-server from root package.json.
• Removed related transitive dependencies from yarn.lock.
• Removed webpack dev server IP logging that depended on webpack-dev-server.

Reviewed changes

Copilot reviewed 2 out of 115 changed files in this pull request and generated 1 comment.

File	Description
package.json	Removes direct dev dependencies and changes AMP validation startup behavior.
webpack.config.js	Removes webpack-dev-server import and onListening logging hook.
yarn.lock	Prunes removed direct and transitive dependency entries.

Comments suppressed due to low confidence (2)

package.json:246

• Removing wait-on breaks the existing webpack:dev:server script, which still invokes wait-on ./build/public/modern-loadable-stats-local.json. As a result yarn dev will fail before the Express server watcher starts unless this script is updated or an alternative readiness check is provided.
  package.json:249
• Removing webpack-dev-server breaks the existing webpack:dev:client script, which runs webpack serve. webpack-cli expects webpack-dev-server to be installed for that command, so yarn dev can no longer start the client dev server.