chore(security): upgrade isomorphic-dompurify from v2 to v3

Bumps isomorphic-dompurify from 2.35.0 to 3.7.1 (latest).
v3 includes security improvements and updated jsdom/dompurify internals.
API is backward-compatible: default export and sanitize() work unchanged.
All 6,631 tests pass and typecheck is clean.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

Author: 2 people

packages/tools/package.json

@@ -46,7 +46,7 @@
     "fast-xml-parser": "^5.5.0",
     "hjson": "^3.2.2",
     "ini": "^4.1.0",
-    "isomorphic-dompurify": "^2.35.0",
+    "isomorphic-dompurify": "^3.0.0",
     "jmespath": "^0.16.0",
     "js-yaml": "^4.1.0",
     "json5": "^2.2.3",