fix: bump google-play-scraper and pin vulnerable transitive deps

- google-play-scraper 10.1.2 -> 10.1.3
- override undici to 7.28.0 (multiple advisories)
- override qs to ^6.15.3 (arrayLimit bypass)
- replace unmaintained request with @cypress/request ^4.0.1,
  dropping vulnerable form-data 2.5.5 and uuid 3.4.0

package.json

@@ -24,6 +24,6 @@
   "dependencies": {
     "app-store-scraper": "^0.18.0",
     "express": "^5.2.0",
-    "google-play-scraper": "^10.1.2"
+    "google-play-scraper": "^10.1.3"
   }
 }