fix(security): xlsx CVE bump and bundled security hardening #4481

Bugbot Review

Bugbot Analysis Progress (6m 2s elapsed)

✅ Gathered PR context (5s)
✅ Completed bug detection (5m 55s)
✅ Posted analysis results (1s)

Final Result: Bugbot completed review - no issues found! ✅

Request ID: serverGenReqId_4d8d0cd0-a814-43d2-8576-0c7f1b8a386a

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit d3dc1d7. Configure here.}