Recurring task to address security vulnerabilities

**Describe the task**
Patch critical and high severity security vulnerabilities identified by Dependabot, Trivy, and Advanced Cluster Security (ACS).

**Acceptance Criteria**
- [ ] if possible, can we just do this to Test branch so we don't have to regression test features added to dev?
- [ ] apply dependabot PRs
- [ ] upgrade packages as needed
- [ ] deploy to Test as required
- [ ] iteratively run Trivy and ACS to check for outstanding issues

**Additional context**
- Did we get to ACS in April 2026 round?

Confirm this task meets our team [**Definition of Ready (DoR)**](https://www.figma.com/board/XmNkN600aAVWFCBmSDdt10/Team-Documents?node-id=1-2&t=Xjd6nHZZ7YlnoOrD-4) before moving to the **Next Sprint** column.

Confirm this task meets our team [**Definition of Done (DoD)**](https://www.figma.com/board/XmNkN600aAVWFCBmSDdt10/Team-Documents?node-id=3-21&t=Xjd6nHZZ7YlnoOrD-4) before moving to the **Done** column.

Start by reviewing the outstanding Dependabot PRs and the current Trivy and Advanced Cluster Security findings; no source files or tests are identified in the issue. The work is done when critical and high-severity vulnerabilities are addressed, required packages are upgraded, the changes are deployed to Test, and repeated scans show no outstanding issues.

Written by the indexing model from the issue text.