chore: resolve npm audit findings

- npm audit fix: ajv, brace-expansion, flatted, js-yaml, minimatch, qs
- short-uuid ^4.2.2 -> ^6.0.3 (drops vulnerable uuid <11.1.1,
  GHSA-w5hq-g745-h8pq; generate() API unchanged)
- nyc (dev-only) -> ^18.0.0 (clears istanbul-lib-processinfo uuid
  advisory)

npm audit now reports 0 vulnerabilities.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

package.json

@@ -40,13 +40,13 @@
     "drachtio-mw-response-time": "^1.0.2",
     "drachtio-srf": "^5.0.27",
     "pino": "^10.1.0",
-    "short-uuid": "^4.2.2"
+    "short-uuid": "^6.0.3"
   },
   "devDependencies": {
     "clear-module": "^4.1.2",
     "eslint": "^9.17.0",
     "eslint-plugin-promise": "^7.2.1",
-    "nyc": "^15.1.0",
+    "nyc": "^18.0.0",
     "tape": "^5.7.5"
   }
 }