[SECURITY] - 依赖软件 org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.40 有安全漏洞 bug

### Steps to Reproduce

org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.40 有安全漏洞，
软件依赖路径：
org.apache.servicecomb:java-chassis-spring-boot-starter-servlet -> org.springframework.boot:spring-boot-starter-web:jar:3.4.5 -> org.springframework.boot:spring-boot-starter-tomcat:jar:3.4.5 -> org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.40
参考信息：
https://nvd.nist.gov/vuln/detail/CVE-2025-48989
https://github.com/advisories/GHSA-gqp3-2cvr-x8m3

### Expected Behavior

升级org.springframework.boot:spring-boot-starter-web:jar:3.4.5到3.4.9

### Servicecomb Version

3.3.0

### Additional Context

_No response_

Locate the build configuration for the dependency path from spring-boot-starter-web 3.4.5 to tomcat-embed-core 10.1.40. Review how Spring Boot versions are declared, update the relevant version to 3.4.9, and verify that the resolved dependency no longer uses the vulnerable Tomcat version.

Written by the indexing model from the issue text.