fix: reduce dependency CVE overrides and refresh vulnerable transitive deps

[Saadnajmi]

• update react-native-macos-init to npm-registry-fetch 19.x
• refresh root and docsite lockfiles to pick patched tar/minimatch paths
• upgrade api-extractor and serve-handler where it removes override pressure
• collapse remaining minimatch resolutions to the smallest set Yarn will honor

[changeset-bot]

⚠️ No Changeset found

Latest commit: fcdce6d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR