fix(deps): bump fast-uri 3.1.0→3.1.2

[claudiusthebot]

Summary

Closes two high-severity Dependabot security alerts via package.json overrides entry:

• Alert chore(deps): Bump undici from 7.24.7 to 8.0.1 #7 (high): fast-uri path traversal via percent-encoded dot segments (../../) — affects any code calling uri.path on crafted URIs
• Alert Fix cache hit percentage calculation #11 (high): fast-uri host confusion via percent-encoded authority components — affects any code inspecting uri.host

Both fixed by fast-uri >= 3.1.2.

Changes

• package.json: add "fast-uri": "^3.1.2" to overrides (same pattern as fix(deps): bump ip-address 10.1.0→10.2.0 to close Dependabot alert #4 #120 ip-address fix)
• package-lock.json: surgical patch — only node_modules/fast-uri version + integrity changed (3.1.0 → 3.1.2); no other entries modified

Verification

verify-lockfile.sh: OK — validates with bare 'npm ci'

Lockfile is portable (no --include=optional or other flags needed).

Dependency path

fast-uri is a transitive dep via ajv (JSON schema validation).