[RUN-4470]Remove fs malware placeholder package from devDependencies

[jayas006]

Fixes failed docs publish and CI by removing the malicious npm fs tombstone and resolving Snyk high/critical findings in the VuePress toolchain.

Publish / npm ci: Removed fs@0.0.1-security from devDependencies. That package is npm’s malware placeholder, not Node’s built-in fs, and PagerDuty’s registry blocks it with 403.
Snyk: Upgraded direct dependencies (axios, glob, lodash) and pinned safe transitive versions via package.json overrides (ajv, fast-uri, brace-expansion, follow-redirects, picomatch, qs).
VuePress scripts (notes.mjs, pr-feed.mjs, etc.) continue to use Node’s built-in fs via import fs from 'fs' — no npm fs package is required.

[Copilot]

Pull request overview

Removes the fs malware-placeholder npm package (0.0.1-security) from this documentation site’s Node/VuePress toolchain dependencies to avoid installing a non-functional / security placeholder module.

Changes:

• Removed fs: ^0.0.1-security from devDependencies in package.json.
• Removed the corresponding fs entry from package-lock.json (including the node_modules/fs package record).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Drops the fs placeholder package from devDependencies.
package-lock.json	Updates the lockfile to remove the resolved fs placeholder package entry.