chore: Bump vulnerable js packages

[chargome]

Upgrade ajv from ^8.17.1 to ^8.18.0 and re-resolve transitive dependencies to pick up patched versions of fast-uri and picomatch.

Resolved vulnerabilities:

• https://github.com/getsentry/sentry-conventions/security/dependabot/56
• https://github.com/getsentry/sentry-conventions/security/dependabot/55
• https://github.com/getsentry/sentry-conventions/security/dependabot/44
• https://github.com/getsentry/sentry-conventions/security/dependabot/43
• https://github.com/getsentry/sentry-conventions/security/dependabot/41

[github-actions]

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

New Features ✨

Attributes

• Add calculated performance scores by loewenheim in #355
• Add rpc.response.status_code attribute by alexander-alderman-webb in #352
• Add rpc.method attribute by alexander-alderman-webb in #351
• Add app vitals start attributes by buenaflor in #353
• Add process.runtime.engine.* attributes by chargome in #347

Bug Fixes 🐛

• (attributes) Change several deprecation statuses to normalize to align with ingestion paths by constantinius in #350
• (create) Replace angle brackets in file names by loewenheim in #356

Internal Changes 🔧

• (gh) Remove myself from CODEOWNERS by lcian in #354

• Bump vulnerable js packages by chargome in #359

---

_{🤖 This preview updates automatically when you update the PR.}

[cleptric]

Could we also run npx npm-check-updates -u (-t minor).