[SECURITY] - org.apache.tomcat.embed:tomcat-embed-core:jar:9.0.70 has security vulnerabilities, CVE-2025-48989

### Steps to Reproduce

See:
https://nvd.nist.gov/vuln/detail/CVE-2025-48989
https://github.com/advisories/GHSA-gqp3-2cvr-x8m3

### Expected Behavior

upgrade `org.apache.tomcat.embed:tomcat-embed-core`,`rg.apache.tomcat.embed:tomcat-embed-el` and `org.apache.tomcat.embed:tomcat-embed-websocket:jar` from 9.0.108

### Servicecomb Version

2.8.24

### Additional Context

_No response_