Update backend dependencies for v2025.4 (#1702)

Run `npm audit fix` and manually bump two smaller libraries: `commander` and `nodemon`.

Author: ktuite

package-lock.json

@@ -14,7 +14,7 @@
     "bcrypt": "^6.0.0",
     "body-parser": "~1.20",
     "cloneable-readable": "^3.0.0",
-    "commander": "^14.0.1",
+    "commander": "^14.0.2",
     "config": "^4.1.1",
     "cookie-parser": "^1.4.6",
     "csv-parse": "~4",
@@ -64,7 +64,7 @@
     "mocha-junit-reporter": "^2.2.1",
     "nock": "^13.5.6",
     "node-mocks-http": "^1.17.2",
-    "nodemon": "~3",
+    "nodemon": "^3.1.11",
     "nyc": "^17.1.0",
     "oidc-provider": "^8.8.1",
     "should": "~13",