[MEDIUM] Bump @babel/runtime to 7.29.7

[OskarEichler]

Summary:

Bumps @babel/runtime from 7.26.9 to 7.29.7 and consolidates all compatible lockfile consumers on the fixed release. This resolves GHSA-968p-4wvh-cqc8 / CVE-2025-27789, where Babel-generated named-capture replacement helpers can exhibit quadratic complexity for crafted replacement strings.

The change is isolated to the HelloWorld dependency declaration and the shared lockfile. No application dependency is changed outside the React Native repository.

Changelog:

[INTERNAL] [SECURITY] - Update @babel/runtime to remove quadratic named-capture replacement behavior.

Test Plan:

• yarn install --frozen-lockfile --ignore-scripts
• yarn why @babel/runtime confirms all compatible consumers resolve to 7.29.7
• yarn audit --groups dependencies no longer reports GHSA-968p-4wvh-cqc8
• yarn workspace helloworld test --runInBand --silent
• yarn workspace helloworld lint
• git diff --check