[WIP] Update serialize-javascript dependency for security advisories

[Claude]

Thanks for asking me to work on this. I will get started on it and keep this PR's description up to date as I form a plan and make progress.

---

This section details on the original issue you should resolve

<issue_title>security(docs-site): serialize-javascript high vulns blocked on Docusaurus upstream fix</issue_title>
<issue_description>## Summary

Two high-severity advisories in serialize-javascript surface in npm audit
for src/docs/. These are build-time only (webpack bundler chain) and are
blocked on a Docusaurus upstream fix. No action can be taken in this repo
until the Docusaurus team ships a release with updated webpack dependencies.

Advisories

• GHSA-5c6j-r48x-rmvq — serialize-javascript
• GHSA-qj8w-gfj5-8c6v — serialize-javascript

Affected package

serialize-javascript is a transitive dependency of:
@docusaurus/bundler → copy-webpack-plugin / css-minimizer-webpack-plugin

Impact

Build-time only. The vulnerable code runs during docusaurus build (webpack)
and does not ship to the browser or affect the deployed site at runtime.

Why no fix is possible today

npm audit fix or a manual version override would break the Docusaurus build.
There is no safe version of serialize-javascript\ that is compatible with the
current @docusaurus/bundler@3.9.2 dependency tree.

What to do

Do not attempt to auto-fix or force-override this vulnerability.
Monitor the Docusaurus changelog for a release that bumps
copy-webpack-plugin / css-minimizer-webpack-plugin to versions that
depend on a patched serialize-javascript.

When a safe upgrade path exists:

1. Bump @docusaurus/core (and related packages) to the patched version.
2. Run npm audit --audit-level=high in src/docs/ and confirm clean.
3. Close this issue.

Agent instructions

Automated agents MUST NOT treat these advisories as actionable work items.
This issue IS the tracking record. Do not open duplicate issues or PRs
for serialize-javascript in src/docs/ until a Docusaurus upstream
fix is available.
</issue_description>

<agent_instructions>Evaluate the opportunity to upgrade to @docusaurus/bundler@3.10.0 and if this fixes the vulnerability blocker</agent_instructions>

Comments on the Issue (you are @claude[agent] in this section)