chore: bump dependabot dependencies

[DanWebb]

Summary

Twelve dependabot PRs are open. This PR applies their updates in one change.

• The lockfile updates js-yaml, axios, joi, brace-expansion, source-map-js, svgo, browserslist, fast-uri, nanoid, postcss-selector-parser, immutable and ws. Each one is at or above the dependabot target version.
• The lockfile on main no longer contains npm or tar. Commit bb28098 removed them. chore: bump tar and npm #338 has nothing left to update.
• @svgr/webpack stays on 5.5.0. Version 8 breaks the Icon component. Webpack fails to resolve the inline loader query in Icon.tsx. Without that query, svgo 3 rejects the .svgo.yml file that ships with mono-icons. chore: bump svgo and @svgr/webpack #343 stays open for a separate migration.
• The svgo copy under postcss-svgo goes to 2.8.4. The svgo 1.3.2 copy under @svgr/webpack 5 remains. Icon disables svgo for that loader.

Closes #333
Closes #336
Closes #338
Closes #339
Closes #340
Closes #341
Closes #342
Closes #347
Closes #348
Closes #349
Closes #350
Closes #352

Testing

npm run build exits with code 0. npm run build-storybook exits with code 0. npm run lint reports one error in Section.stories.tsx. The same error occurs on main.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ EDITORCONFIG	editorconfig-checker	1		0	0.0s
✅ JSON	jsonlint	1		0	0.19s
✅ JSON	npm-package-json-lint	yes		no	0.39s
✅ JSON	prettier	1		0	1.06s
✅ JSON	v8r	1		0	2.38s
✅ REPOSITORY	checkov	yes		no	12.66s
✅ REPOSITORY	gitleaks	yes		no	4.34s
✅ REPOSITORY	git_diff	yes		no	0.05s
✅ REPOSITORY	secretlint	yes		no	1.02s
✅ REPOSITORY	trivy-sbom	yes		no	1.96s
✅ REPOSITORY	trufflehog	yes		no	3.02s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by