feat: remove production vulnerabilities

[dianager]

Pre-Submission Checklist

• Opened an issue discussing these changes before opening the PR
• Ran the linter and tests via make prepush
• Included comprehensive and convincing tests for changes

Issues

Closes:

• Issue #
• Issue #
• Issue #

Summarize the issues that discussed these changes

Changes

Fix production security vulnerabilities. Upgrades three production dependencies to eliminate known CVEs.

Security

Severity	Package	Advisory	Fix
High	find-my-way	GHSA-rrr8-f88r-h8q6 — ReDoS in multiparametric routes	^7.6.0 → ^9.6.0
Moderate	uuid	GHSA-w5hq-g745-h8pq — buffer bounds check missing in v3/v5/v6	^9.0.0 → ^14.0.0
Low	send	GHSA-m6fv-jmcg-4jfg — XSS via template injection in error pages	^0.18.0 → ^1.2.1

After this PR: 0 production vulnerabilities.

No restify source changes required for find-my-way or uuid — their APIs used by
restify are compatible across the version range.

Test adaptation

send 1.x returns Content-Type charset in lowercase (utf-8 instead of UTF-8).
test/plugins/staticFiles.test.js updated to compare content-type values
case-insensitively.