chore(deps): update undici security fixes

[corwinm]

Summary

• refreshes the transitive undici resolutions in pnpm-lock.yaml
• updates undici 7.28.0 → 7.29.0, fixing Dependabot alerts chore(deps): bump release tooling patches #75–fix: align vscode typings with engine #79 (GHSA-8xcm-r25x-g524, GHSA-4cwx-7wf7-3272, GHSA-jr45-8vmc-qm54, GHSA-v3r7-h72x-cjcm, and GHSA-m8rv-5g2x-5cg5)
• updates the parallel undici 6.27.0 → 6.28.0 resolution, clearing the same newly published advisory families from the @semantic-release/npm path

The change is lockfile-only; parent dependency ranges already accept the patched releases.

Verification

• pnpm install --frozen-lockfile
• pnpm why undici --depth 10 — only 6.28.0 and 7.29.0 remain
• pnpm audit --json — zero undici findings (down from eight package-manager findings); two unrelated high-severity findings remain for fast-uri@3.1.4 and brace-expansion@5.0.8
• pnpm test — 26 passing
• pnpm run package
• pnpm run verify:release