MT#64579 Reduce npm audit vulnerabilities from 132 to 30

Bumped up packages:
* glob
* globals
* jest
* @quasar/app-webpack

Yarn resolutions added
- `serialize-javascript: ^7.0.3` — fixes high-severity RCE vulnerability
  via RegExp.flags/Date.toISOString() (CVE in terser-webpack-plugin and
  @quasar/ssr-helpers paths)
- `**/postcss-svgo/svgo: ^4.0.1` — fixes high-severity Billion Laughs
  DoS (XML entity expansion) in cssnano's SVG optimization pipeline
- `dot-object/minimatch: ^3.1.2` — fixes high-severity ReDoS in
  dot-object's glob dependency
- `**/flatted: 3.4.0` — fixes high-severity unbounded recursion DoS
  in eslint and eslint-webpack-plugin's caching layer

What remains (30 vulnerabilities — all upstream-blocked)
The remaining vulnerabilities are entirely confined to dev-only
tooling and cannot be fixed without upstream releases:
- minimatch ReDoS across jest, @vue/test-utils, jest-serializer-vue,
  @quasar/app-webpack, @quasar/quasar-app-extension-testing-unit-jest
- ajv ReDoS across eslint, eslint-webpack-plugin, @quasar/app-webpack
- webpack SSRF (buildHttp feature, not used in this project)
- qs DoS in webpack-dev-server's express (local dev only)
- esbuild dev server CORS issue (local dev only)
- vue-template-compiler XSS (no patch available upstream)
- tmp symlink issue, @tootallnate/once control flow (test tooling only)

Change-Id: I72f34757538f97bb3495a57d7f0263df58102f1e
(cherry picked from commit 1ebe3c0683)

package.json

@@ -85,16 +85,18 @@
     "generate-password": "^1.5.1",
     "glob": "7.1.7",
     "is-valid-glob": "1.0.0",
-    "js-yaml": "3.14.1",
+    "jest": "30.3.0",
-    "parseuri": "^0.0.6",
+    "jest-serializer-vue": "3.1.0",
+    "js-yaml": "4.1.1",
     "uuid": "13.0.0",
     "vue-wait": "^1.5.3",
     "vuelidate": "^0.7.7"
   },
   "resolutions": {
-    "@isaacs/brace-expansion": "5.0.1",
+    "serialize-javascript": "^7.0.3",
-    "qs": "6.14.1",
+    "**/postcss-svgo/svgo": "^4.0.1",
-    "tar": "7.5.7"
+    "dot-object/minimatch": "^3.1.2",
+    "**/flatted": "3.4.0"
   },
   "browserslist": [
     "last 10 Chrome versions",