chore: bump db-helpers to ^0.9.25 and resolve npm audit findings (#150)

* chore: bump @jambonz/db-helpers to ^0.9.25

0.9.24 moved to uuid ^11.1.1 (GHSA-w5hq-g745-h8pq) and 0.9.25 dropped
the uuid dependency entirely in favor of crypto.randomUUID.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: resolve npm audit findings

- npm audit fix: ajv, brace-expansion, flatted, js-yaml, minimatch, qs
- short-uuid ^4.2.2 -> ^6.0.3 (drops vulnerable uuid <11.1.1,
  GHSA-w5hq-g745-h8pq; generate() API unchanged)
- nyc (dev-only) -> ^18.0.0 (clears istanbul-lib-processinfo uuid
  advisory)

npm audit now reports 0 vulnerabilities.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

package.json

@@ -29,7 +29,7 @@
   "homepage": "https://github.com/jambonz/sbc-sip-sidecar#readme",
   "dependencies": {
     "@babel/helpers": "^7.26.10",
-    "@jambonz/db-helpers": "^0.9.21",
+    "@jambonz/db-helpers": "^0.9.25",
     "@jambonz/digest-utils": "^0.0.9",
     "@jambonz/mw-registrar": "^0.2.7",
     "@jambonz/realtimedb-helpers": "^0.8.21",
@@ -40,13 +40,13 @@
     "drachtio-mw-response-time": "^1.0.2",
     "drachtio-srf": "^5.0.27",
     "pino": "^10.1.0",
-    "short-uuid": "^4.2.2"
+    "short-uuid": "^6.0.3"
   },
   "devDependencies": {
     "clear-module": "^4.1.2",
     "eslint": "^9.17.0",
     "eslint-plugin-promise": "^7.2.1",
-    "nyc": "^15.1.0",
+    "nyc": "^18.0.0",
     "tape": "^5.7.5"
   }
 }