build(deps): bump body-parser, multer, qs, zod, fast-uri, serialize-javascript and ip-address

Root yarn.lock, all within existing ranges:
- body-parser 2.4.0 (GHSA high) and qs 6.16.1 via express
- zod 4.6.7 via @modelcontextprotocol/sdk
- fast-uri 3.1.9, serialize-javascript 7.1.3 and ip-address 10.7.4

zod 3.25.76 stays: @subql/cli 6.6.3 (latest) requires ^3.25.67 and fails
to build the project when forced onto zod 4.

docker/indexer: body-parser 2.4.0, qs 6.16.1 and multer 2.5.0. multer is
pinned exactly by @nestjs/platform-express, so it is overridden in scope.

docker/indexer/package.json

@@ -30,6 +30,9 @@
   "overrides": {
     "package-json": "^7.0.0",
     "uuid": "^11.1.1",
-    "vm2": "3.12.2"
+    "vm2": "3.12.2",
+    "@nestjs/platform-express": {
+      "multer": "2.5.0"
+    }
   }
 }