fix(ci,books): resolve GHCR/CVE issues and clean pin/unpin fallbacks

- regenerate lockfile after package version alignment
- remove useless fallback spreads in pin and unpin column
- resolve GHCR push auth and fast-uri CVE
- patch fast-xml-builder CVE in image scan

package.json

@@ -72,7 +72,9 @@
   "pnpm": {
     "overrides": {
       "@esbuild-kit/core-utils>esbuild": "^0.25.12",
-      "fastify": "^5.8.5"
+      "fastify": "^5.8.5",
+      "fast-uri": "^3.1.1",
+      "fast-xml-builder": "^1.1.7"
     },
     "onlyBuiltDependencies": [
       "@nestjs/core",