fix(security): update rack 3.2.5 and nokogiri 1.19.1

Fixes 3 vulnerabilities flagged by bundler-audit:
- rack CVE-2026-22860 (High): Directory traversal via Rack::Directory
- rack GHSA-whrj-4476-wvmp (Medium): Stored XSS via javascript: filenames
- nokogiri GHSA-wx95-c6cv-8532 (Medium): Unchecked xmlC14NExecute return

Author: rz1989s

Gemfile.lock

@@ -189,11 +189,11 @@ GEM
       net-protocol
     net-ssh (7.3.0)
     nio4r (2.7.5)
-    nokogiri (1.19.0-aarch64-linux-gnu)
+    nokogiri (1.19.1-aarch64-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.19.0-arm64-darwin)
+    nokogiri (1.19.1-arm64-darwin)
       racc (~> 1.4)
-    nokogiri (1.19.0-x86_64-linux-gnu)
+    nokogiri (1.19.1-x86_64-linux-gnu)
       racc (~> 1.4)
     ostruct (0.6.3)
     parallel (1.27.0)
@@ -219,7 +219,7 @@ GEM
       nio4r (~> 2.0)
     raabro (1.4.0)
     racc (1.8.1)
-    rack (3.2.4)
+    rack (3.2.5)
     rack-session (2.1.1)
       base64 (>= 0.1.0)
       rack (>= 3.0.0)
@@ -404,4 +404,4 @@ DEPENDENCIES
   web-console
 
 BUNDLED WITH
-   2.4.10
+  4.0.7