Fix Dependabot security audit findings

[cursor]

Summary

• refreshed vulnerable transitive dependencies in yarn.lock within existing semver ranges
• added a targeted uuid@11.1.1 resolution because Storybook 8's @storybook/addon-actions still depends on vulnerable uuid@^9.0.0, while the patched line starts at 11.1.1
• left existing deprecation-only audit notices untouched

Verification

• yarn install --immutable
• yarn npm audit --all --recursive --json (no remaining GitHub advisory URLs; still reports deprecation notices)
• yarn jest --runInBand
• yarn build-storybook