chore(deps): bump browserslist to 4.28.7

[mozilla-blender]

Summary

Resolves a flagged transitive dependency advisory.

This is a transitive dependency update. Only package-lock.json (and possibly package.json) changed.

---

Created by BLEnder investigation via BLEnder

[mozilla-blender]

BLEnder investigated: This dependency has an open security alert, but the repo is not affected.

browserslist@4.28.1 is a build-only transitive dep (babel/webpack/core-js-compat). No imports, no .browserslistrc, no package.json browserslist field. The OOM needs a long-running process passing externally-varied queries; only next build resolves fixed targets.

This PR can be reviewed and merged as a normal dependency update.

[mozilla-blender]

BLEnder could not fix this PR automatically. Workflow run