fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
- https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6444610

package.json

@@ -27,7 +27,7 @@
     "@auth0/thumbprint": "0.0.6",
     "archiver": "^3.0.0",
     "async": "~2.6.4",
-    "axios": "^1.6.4",
+    "axios": "^1.6.8",
     "binary": "^0.3.0",
     "body-parser": "^1.19.2",
     "cb": "~0.1.0",
@@ -43,7 +43,7 @@
     "express-passport-logout": "~0.1.0",
     "express-session": "^1.15.6",
     "freeport": "~1.0.2",
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.2",
     "kerberos-server": "^1.0.0",
     "ldapjs": "^2.3.2",
     "lodash": "^4.17.21",