Cardano Updates

* mithril-aggregator-client from `0.2.2` to `0.2.3`
* mithril-aggregator-discovery from `0.1.8` to `0.1.9`
* mithril-protocol-config from `0.1.9` to `0.1.10`
* mithril-aggregator from `0.9.9` to `0.9.10`
* mithril-client-cli from `0.13.16` to `0.13.17`
* mithril-common from `0.7.7` to `0.7.8`
* mithril-end-to-end from `0.5.1` to `0.5.2`
* openapi.yaml from `0.1.66` to `0.1.67`

There is a chance that incompatible ordering functions may be
passed to the `verifyCert`. And we need to catch this problem
sooner and prevent from building incorrect cert with mismatched
amount of votes, so we add a check that the size of the deduplicated
voters and certs is the same.

See https://github.com/tweag/cardano-peras/issues/240 for the
deeper discussion.

added:
* github:input-output-hk/mithril/d1d2daecaf866293e1544a6b84caa25bb0d3648f#mithril-client-cli
* github:input-output-hk/mithril/d1d2daecaf866293e1544a6b84caa25bb0d3648f#mithril-signer
removed:
* github:input-output-hk/mithril/5b335c5e8fc109f8ca63c06ab281501d53e2f8d0#mithril-client-cli
* github:input-output-hk/mithril/5b335c5e8fc109f8ca63c06ab281501d53e2f8d0#mithril-signer

Prevent `TxInfo` translation failure for `LegacyMode`

mock-browser (last published 2022) pulled an ancient chain
mock-browser -> [email protected] -> [email protected] -> [email protected], the source
of the form-data unsafe-random-boundary alert (GHSA-fjxv-7rqg-78g4) that the
~2.3.2 range could not relock past.

- Removed the unused mock-browser devDependency from e2e and wallet.
- Replaced its single real use in dapp-connector's injectGlobal test with a
  minimal inline window stub (injectGlobal only touches window.cardano; the
  test only reads window.location.hostname) and dropped the module .d.ts shim.

Result: mock-browser, jsdom@9, request and [email protected] are all removed;
the only remaining form-data is the patched 4.0.6. dapp-connector tests
green (44/44); full build green.

Resolves #1703.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Replaces the early-2020 artillery prerelease pin in packages/e2e with the
current 2.0.33 release. This drops the legacy libhoney → superagent-proxy →
proxy-agent@5 → pac-resolver@5 → degenerator@3 → vm2 chain entirely, and
moves jsonpath-plus and fast-xml-parser onto patched lines.

Result (yarn.lock):
- vm2: REMOVED from the tree (closes the ~18 critical + high/medium vm2 alerts)
- jsonpath-plus: 7.2.0 → 10.4.0 (RCE advisory, GHSA-pppg-cpfq-h7wr et al.)
- fast-xml-parser: 4.2.5 → 5.x (entity-injection advisories)

artillery is a dev/e2e-only load-testing tool (not imported by SDK code).
Validated: `yarn build` green across all 21 workspaces; artillery CLI loads.
The e2e artillery scripts (artillery:stake-pool-query, artillery:wallet-restoration)
should be exercised in CI/e2e against a running stack.

Resolves #1702.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Bumps the security-updates group with 2 updates in the / directory: [axios](https://github.com/axios/axios) and [vm2](https://github.com/patriksimek/vm2).


Updates `axios` from 1.11.0 to 1.16.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.16.0)

Updates `vm2` from 3.9.18 to 3.11.5
- [Release notes](https://github.com/patriksimek/vm2/releases)
- [Changelog](https://github.com/patriksimek/vm2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/patriksimek/vm2/compare/3.9.18...v3.11.5)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.16.0
  dependency-type: direct:production
  dependency-group: security-updates
- dependency-name: vm2
  dependency-version: 3.11.5
  dependency-type: indirect
  dependency-group: security-updates
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps the npm_and_yarn group with 1 update in the /packages/cardano-services directory: [uuid](https://github.com/uuidjs/uuid).
Bumps the npm_and_yarn group with 1 update in the /packages/core directory: [ip-address](https://github.com/beaugunderson/ip-address).
Bumps the npm_and_yarn group with 1 update in the /packages/e2e directory: [uuid](https://github.com/uuidjs/uuid).
Bumps the npm_and_yarn group with 1 update in the /packages/projection-typeorm directory: [uuid](https://github.com/uuidjs/uuid).
Bumps the npm_and_yarn group with 1 update in the /packages/wallet directory: [uuid](https://github.com/uuidjs/uuid).
Bumps the npm_and_yarn group with 1 update in the /packages/web-extension directory: [uuid](https://github.com/uuidjs/uuid).


Updates `uuid` from 10.0.0 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0)

Updates `ip-address` from 9.0.5 to 10.2.0
- [Commits](https://github.com/beaugunderson/ip-address/compare/v9.0.5...v10.2.0)

Updates `uuid` from 8.3.2 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0)

Updates `uuid` from 9.0.1 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0)

Updates `uuid` from 8.3.2 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0)

Updates `uuid` from 8.3.2 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ip-address
  dependency-version: 10.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>

fix: patch dependency vulnerabilities (critical→low) with audit & blast-radius