fix(deps): update vulnerable development dependencies

[TheRealAgentK]

Summary

• update fast-uri from 3.1.5 to the patched 3.1.6 release
• update qs from 6.15.3 to the patched 6.16.0 release
• retain the existing known-clean Keyv/Cacheable supply-chain safety overrides

fast-uri@3.1.6 is deliberately used instead of 3.1.7 because 3.1.7 was published on the day of this update. The updated package tarballs and lifecycle metadata were reviewed, registry signatures were verified, and the final dependency tree had no matches in the current multi-vendor Shai-Hulud/ChainDrop IOC feed.

Verification

• npm run prepare
• npm test
• npm run eslint
• npm run tseslint
• npm run prettier:check
• npm audit
• npm audit --omit=dev
• npm audit signatures

All checks pass and npm reports zero vulnerabilities.

[QuantumNightmare]

👍