net - chore: upgrade undici to 8.9.0 for CVE fixes (#1708)

Bump @cacheable/net's undici range from ^8.7.0 to ^8.9.0 and lock
8.10.0. This resolves CVE-2026-13697, CVE-2026-14643, CVE-2026-16728,
CVE-2026-16729, and CVE-2026-15157 (8.7.0 => 8.9.0).

undici remains type-only in @cacheable/net; fetch still uses Node's
global fetch. Transitive undici copies from wrangler/miniflare/docula
are unchanged.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>

Author: jaredwray

packages/net/package.json

@@ -44,7 +44,7 @@
 		"cacheable": "workspace:^",
 		"hookified": "^3.0.1",
 		"http-cache-semantics": "^4.2.0",
-		"undici": "^8.7.0"
+		"undici": "^8.9.0"
 	},
 	"keywords": [
 		"cacheable",