Security fixes:
- Bump hono override from ^4.11.7 to ^4.11.10 (timing comparison
  hardening in basicAuth/bearerAuth, alerts #18 and #19)
- Add fast-xml-parser ^5.4.1 override to node/prisma (stack overflow
  in XMLBuilder, alert #32)
- Bump fast-xml-parser override in veterinary-app from ^5.3.4 to
  ^5.4.1 for consistency

Dependabot improvement:
- Use directories (plural) for node/prisma so the connector and its
  veterinary-app example are updated in the same PR, keeping
  lockfiles consistent.

…abot config (#300)

## Summary

Resolves all 3 open Dependabot security alerts and fixes a systemic
Dependabot config issue.

## Security Alerts Fixed

| Severity | Alert | Package | Location | Fix |
|----------|-------|---------|----------|-----|
| LOW | #32 | fast-xml-parser < 5.3.8 | node/prisma | Added override
^5.4.1 |
| LOW | #19 | hono < 4.11.10 | node/prisma | Bumped override ^4.11.7 →
^4.11.10 |
| LOW | #18 | hono < 4.11.10 | node/prisma/examples/veterinary-app |
Bumped override ^4.11.7 → ^4.11.10 |

The existing overrides had version ranges that were too low to cover the
required fix versions.

## Dependabot Config Fix

Changed `node/prisma` and `node/prisma/examples/veterinary-app` from
separate `directory` entries to a single entry using `directories`
(plural). This ensures both lockfiles are updated in the same PR,
keeping dependencies consistent between the library and its example.

## Test plan

- [x] `npm audit` reports 0 vulnerabilities in both directories
- [ ] CI passes