Address open Undici Dependabot alerts via serverless override + lockfile update

[Copilot]

The highest-severity Dependabot alerts were all tied to vulnerable undici versions in the serverless dependency graph. This PR updates transitive resolution so all open Undici alerts are handled in one focused change set.

• Scope

  • Targets the serverless workspace, where undici is present transitively.
  • Keeps the fix narrow: no unrelated dependency upgrades.

• Dependency resolution change

  • Adds an npm override in serverless/package.json to force patched undici resolution (^6.24.0).
  • Regenerates serverless/package-lock.json accordingly.

• Resolved outcome

  • Lockfile now resolves undici from 6.23.0 to 6.24.1, which is within the patched range for the reported advisories.

{
  "overrides": {
    "undici": "^6.24.0"
  }
}