chore(deps): Bump express to latest 4.x in dev packages

[github-actions]

Note

The pull request "chore(deps): Bump express to latest 4.x in dev packages" was created by @Lms24 but did not reference an issue. Therefore this issue was created for better visibility in external tools like Linear.

bumps express so that a transitive dep path-to-regexp is bumped to a version safe from https://github.com/getsentry/sentry-javascript/security/dependabot/452.

Closes https://github.com/getsentry/sentry-javascript/security/dependabot/452

[linear]

JS-1637