chore: update dev dependencies to fix 14 security vulnerabilities

[petersowah]

Summary

Updates composer.lock dev dependencies to resolve 14 Dependabot security advisories.

High severity:

• symfony/http-foundation → v7.4.13 — path-info parsing authorization bypass
• phpunit/phpunit → 11.5.50 — unsafe deserialization in PHPT code coverage
• symfony/mime → v7.4.13 — CRLF injection / SMTP command injection

Medium severity:

• symfony/mime → email header injection via non-token characters
• symfony/mailer → argument injection via dash-prefixed recipient address
• symfony/routing → URL injection via unanchored regex alternation
• league/commonmark → XSS in attributes extension, raw HTML bypass, embed domain bypass
• psy/psysh → local privilege escalation via CWD .psysh.php auto-load

Low severity:

• symfony/yaml → ReDoS via catastrophic backtracking and billion-laughs memory allocation
• symfony/polyfill-intl-idn → Punycode payload equivalence bypass

All packages upgraded to their patched versions via composer update.

[vercel]

@petersowah is attempting to deploy a commit to the Cloudinary DevX Team on Vercel.

A member of the Team first needs to authorize it.