fix: resolve dependency security advisories

[dannyhw]

Summary

Fixes the current Dependabot / `pnpm audit` findings that can be resolved without adding overrides. Audit goes from 27 findings to 4.

• `@storybook/mcp` ^0.8.0 → ^10.6.0 in `packages/react-native`. The 0.8.0 release pinned `valibot` to exactly 1.2.0 (GHSA-5qjj-4xww-7phc). 10.6.0 has an identical export surface, so no code changes were needed.
• Refreshed in-range transitive resolutions (`pnpm update` + `pnpm dedupe`, no new overrides): brace-expansion, js-yaml, nanoid, postcss, postcss-selector-parser, fast-uri, browserslist, fastify, @xmldom/xmldom (0.8.x and 0.9.x), and the body-parser 2 copy of qs.
• metro 0.84.4 → 0.84.5 / 0.84.6 via `@expo/metro` 56.0.2 and `@react-native/community-cli-plugin`'s `^0.84.3` range. Metro 0.84.5 removed its `image-size` dependency, which clears that finding for the metro path. Expo keeps a nested 0.84.5 since it pins metro exactly.

Intentionally left open

These need an override or have no patched release, so they are left for a separate decision:

Package	Why
image-size 2.0.2	Remaining consumers are `@docusaurus/mdx-loader` and `@callstack/repack`. No patched release exists on npm for either major.
decode-uri-component 0.2.2	`query-string@7` pins `^0.2.2`; expo-router and react-navigation require query-string 7. Only reachable via override to 0.5.0.
qs 6.15.3	express 4 / body-parser 1 pin `~6.15.1`, pulled in by webpack-dev-server 5 which docusaurus 3.10.2 requires. Docs dev server only.

Verification

• `pnpm install --frozen-lockfile`, `pnpm dedupe --check`, `pnpm repo:lint`
• `pnpm check:types`, `pnpm build`, `pnpm test` (all suites green)
• `pnpm --filter expo-example check` and `storybook-generate`
• `docs` production build

[changeset-bot]

🦋 Changeset detected

Latest commit: aa999f2

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 9 packages

Name	Type
@storybook/react-native	Patch
@storybook/addon-ondevice-actions	Patch
@storybook/addon-ondevice-backgrounds	Patch
@storybook/addon-ondevice-controls	Patch
@storybook/addon-ondevice-notes	Patch
@storybook/react-native-theming	Patch
@storybook/react-native-ui-common	Patch
@storybook/react-native-ui-lite	Patch
@storybook/react-native-ui	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR