security: update rollup plugins and fix potential XSS in idle sample

[RinZ27]

Hi, I've updated this PR to include a fix for a potential XSS vulnerability in the idle API sample.

Key Changes:

1. Security Hardening: Refactored api-samples/idle/history.js to replace insecure .innerHTML usage with safe DOM manipulation (textContent and replaceChildren). This mitigates potential XSS risks from untrusted data in the history log.
2. Dependency Updates: Bumped @rollup/plugin-commonjs and @rollup/plugin-node-resolve to their latest stable versions across multiple functional samples:
   • functional-samples/ai.gemini-on-device
   • functional-samples/ai.gemini-on-device-calendar-mate
   • functional-samples/ai.gemini-on-device-summarization
   • functional-samples/libraries-xhr-in-sw

These changes ensure the samples follow modern security standards and protect against potential supply chain vulnerabilities.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[oliverdunk]

Thanks for the contribution. Can you merge with main and remove the package updates? I'd be happy to accept the changes to avoid innerHTML, but we have Dependabot to update packages (we are a little behind on merging those PRs which I will try to do soon).

[RinZ27]

Reverted the package updates and merged main as requested. Left the innerHTML fixes as is.

[RinZ27]

Added the missing newline as requested.