Update lockfiles to remediate fast-xml-builder Dependabot alerts

[Copilot]

The open Dependabot alerts were caused by transitive resolutions of fast-xml-builder at 1.1.4, which is within the vulnerable range. This updates the affected lockfiles so installs resolve a patched release without changing top-level package manifests.

• Scope

  • Updated the committed npm lockfiles in:
    • frontend/package-lock.json
    • serverless/package-lock.json

• Dependency resolution

  • Moved transitive fast-xml-builder resolution from 1.1.4 to 1.2.0
  • Pulled in the corresponding transitive updates required by that resolution:
    • path-expression-matcher → 1.5.0
    • xml-naming → 0.1.0

• Impact

  • Clears the fast-xml-builder alert path while keeping the change limited to dependency resolution data already captured in lockfiles
  • Leaves direct dependency declarations unchanged

"node_modules/fast-xml-builder": {
  "version": "1.2.0",
  "resolved": "https://registry.npmjs.org/fast-xml-builder/-/fast-xml-builder-1.2.0.tgz"
}