chore(deps): [release-1.9] bump dompurify using surgeon

[alizard0]

It fixes CVE-2026-41240 by patching dompurify to 2.4.0 or higher.
https://redhat.atlassian.net/browse/RHIDP-13315

Running yarn install in /Users/alizardo/Documents/engineering/github/rhdh-plugins/workspaces/orchestrator ...
CVE-2026-41240 dompurify
  patch: 3.4.0
  affected: < 3.4.0
@internal/orchestrator@1.0.0 /Users/alizardo/Documents/engineering/github/rhdh-plugins/workspaces/orchestrator
└─┬ app@0.0.3 -> ./packages/app
  ├─┬ @backstage/plugin-api-docs@0.13.1
  │ ├─┬ @asyncapi/react-component@2.5.1
  │ │ └─┬ isomorphic-dompurify@2.21.0
  │ │   └── dompurify@3.3.0 deduped
  │ └─┬ swagger-ui-react@5.30.0
  │   └── dompurify@3.2.6
  └─┬ @backstage/plugin-techdocs@1.16.0
    └── dompurify@3.3.0
Upgrading dependency with yarn-lockfile-surgeon → dompurify@3.4.0 ...
@internal/orchestrator@1.0.0 /Users/alizardo/Documents/engineering/github/rhdh-plugins/workspaces/orchestrator
└─┬ app@0.0.3 -> ./packages/app
  ├─┬ @backstage/plugin-api-docs@0.13.1
  │ ├─┬ @asyncapi/react-component@2.5.1
  │ │ └─┬ isomorphic-dompurify@2.21.0
  │ │   └── dompurify@3.4.0 deduped
  │ └─┬ swagger-ui-react@5.30.0
  │   └── dompurify@3.2.6
  └─┬ @backstage/plugin-techdocs@1.16.0
    └── dompurify@3.4.0

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud