fix(security): pin fast-uri to ^3.1.4 to resolve high-severity advisory

The security:audit CI gate (npm audit --audit-level=high --omit=dev) failed
on the transitive fast-uri 3.1.2 (via @aws-cdk/toolkit-lib -> ajv), flagged
for host confusion (GHSA-v2hh-gcrm-f6hx, GHSA-4c8g-83qw-93j6).

Add a fast-uri override pinned to ^3.1.4 (the patched 3.x release),
matching the existing pattern used for fast-xml-parser and protobufjs.

Author: padmak30

npm-shrinkwrap.json

@@ -174,7 +174,8 @@
     "glob": "^13.0.0",
     "fast-xml-parser": "5.5.7",
     "@aws-sdk/xml-builder": "3.972.15",
-    "protobufjs": ">=7.6.3"
+    "protobufjs": ">=7.6.3",
+    "fast-uri": "^3.1.4"
   },
   "engines": {
     "node": ">=20"