fix: bump commitizen and regenerate lock file to resolve npm audit findings

Lock file regenerated (fixed 16 on its own).
Direct upgrades: commitizen ^4.3.1 -> ^4.3.2 (devDependency).
Overrides: none (published package with no runtime dependencies; the
remaining fixes are cross-major).
Vuln count: snyk 0 -> 0 (devDependencies only, nothing for snyk test to
read), npm audit 21 -> 5. Build verified passing.

Remaining (dev-only): jest-coverage-badges (mkdirp, minimist; no fixed
release) and jest-junit 15 -> 17 major (uuid).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: cs-raj