MT#64368 Fix vuln deps with yarn resolutions

- force @isaacs/brace-expansion 5.0.1 (patches minimatch/glob issue)
- force qs 6.14.1 (patches express/body-parser issue from quasar tooling)
- force tar 7.5.7 (patches node-gyp/tar issue pulled via npm)
- note: npm itself has no patch plus the dep was not used so we
  removed it.

NGCP-Flow: mr11.5

Change-Id: I9acd8e3c992d0678b39ca4f1722df5a2ce8f225c
(cherry picked from commit 3bdadd1fc1)

package.json

@@ -43,9 +43,8 @@
     "jwt-decode": "^2.2.0",
     "load-script": "^1.0.0",
     "loader-utils": "^3.2.1",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "moment": "^2.29.4",
-    "npm": "^11.7.0",
     "path": "0.12.7",
     "qrcode": "1.5.4",
     "quasar": "2.18.6",
@@ -92,6 +91,11 @@
     "vue-wait": "^1.5.3",
     "vuelidate": "^0.7.7"
   },
+  "resolutions": {
+    "@isaacs/brace-expansion": "5.0.1",
+    "qs": "6.14.1",
+    "tar": "7.5.7"
+  },
   "browserslist": [
     "last 10 Chrome versions",
     "last 10 Firefox versions",