fix(deps): patch undici and nodemailer high-severity advisories

Bump undici 8.4.1 -> 8.5.0 (GHSA-vmh5-mc38-953g, TLS certificate
validation bypass in the SOCKS5 ProxyAgent) and nodemailer 9.0.0 -> 9.0.1
(GHSA-p6gq-j5cr-w38f), both direct dependencies. Clears the production
high-severity dependency audit; no API change.

package.json

@@ -73,11 +73,11 @@
     "mmdb-lib": "^3.0.2",
     "next": "16.2.6",
     "next-themes": "^0.4.6",
+    "nodemailer": "^9.0.1",
     "p-limit": "^7.3.0",
     "pg-boss": "^12.18.2",
     "prisma": "^7.8.0",
     "qrcode": "^1.5.4",
-    "nodemailer": "^9.0.0",
     "radix-ui": "^1.4.3",
     "react": "19.2.7",
     "react-dom": "19.2.7",
@@ -87,7 +87,7 @@
     "sax": "^1.6.0",
     "sonner": "^2.0.7",
     "tailwind-merge": "^3.6.0",
-    "undici": "^8.4.1",
+    "undici": "^8.5.0",
     "web-push": "^3.6.7",
     "yaml": "^2.8.4",
     "zod": "^4.4.3",