[release-1.9] chore(deps): bump linkify-it to 5.0.2

[albarbaro]

Description

Addresses CVE-2026-48801
Bumps linkify-it to > 5.0.2.
In root folder, graphiql@3.1.1being is pinned and cannot be upgraded. This is a partial fix.

root@1.9.8
└─┬ app@1.0.1 -> ./packages/app
  └─┬ @backstage/plugin-api-docs@0.13.1
    ├─┬ @graphiql/react@0.23.1
    │ └─┬ markdown-it@14.1.0
    │   └── linkify-it@5.0.2
    └─┬ graphiql@3.1.1
      └─┬ markdown-it@12.3.2
        └── linkify-it@3.0.3

Which issue(s) does this PR fix

• Fixes RHIDP-15581

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5147
• quay.io/rhdh-community/rhdh:pr-5147-3a6316a1

[albarbaro]

/retest

[albarbaro]

/retest