Patch vulnerable OpenTelemetry core dependency in eval tooling

The azd eval tooling resolves a nested vulnerable copy of `@opentelemetry/core@2.0.0` through Azure Monitor Exporter.

Dependabot alert: GHSA-8988-4f7v-96qf
Affected manifest: `cli/azd/test/evals/package-lock.json`
Patched version: `@opentelemetry/core@2.8.0` or later

Update the dependency resolution so every consumer uses a patched release.

Open cli/azd/test/evals/package-lock.json and inspect the dependency entries for @opentelemetry/core and Azure Monitor Exporter. Update the dependency resolution to @opentelemetry/core 2.8.0 or later, then verify that every resolved consumer uses a patched release.

Written by the indexing model from the issue text.