Bump the production-dependencies group across 1 directory with 2 updates

Bumps the production-dependencies group with 2 updates in the / directory: [express](https://github.com/expressjs/express) and [morgan](https://github.com/expressjs/morgan).


Updates `express` from 5.2.1 to 5.3.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v5.2.1...v5.3.0)

Updates `morgan` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.12.0...1.12.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: morgan
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

package-lock.json

@@ -20,11 +20,11 @@
     "@httptoolkit/httpolyglot": "^3.1.0",
     "concat-stream": "^2.0.0",
     "cookie-parser": "^1.4.6",
-    "express": "^5.2.1",
+    "express": "^5.3.0",
     "express-prom-bundle": "^8.0.0",
     "http2-express": "^1.1.1",
     "jsonwebtoken": "^9.0.0",
-    "morgan": "^1.12.0"
+    "morgan": "^1.12.1"
   },
   "overrides": {
     "jws": "^3.2.3"