### Issue # (if applicable)

N/A

### Reason for this change

Upgrading the `jsii-rosetta` version to bring in this fix (aws/jsii-rosetta#3579) which is more tolerant of multiple concrete dependencies with the same version number - it picks either one dependency instead of failing (which was causing pipeline build failures)

### Description of changes

Upgraded the `jsii-rosetta` version.

### Describe any new or updated permissions being added

N/A

### Description of how you validated changes

N/A

### Checklist
- [ ] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…#37022)

Upgrade `ajv` to `8.18.0`, which is version that is not vulnerable to a ReDoS attack anymore.

Note that CDK never had an actual vulnerability in the first place because the input was not attacker-controlled, but CVE scanners will flag this finding regardless.

This overrides the package in our repository, the dependency that gets installed at build time is bundled into the final `aws-cdk-lib` tarball.

Closes #36989

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-arcregionswitch
│ └ resources
│    └[~]  resource AWS::ARCRegionSwitch::Plan
│       └      - arnTemplate: arn:${Partition}:arc-region-switch:${Region}:${Account}:plan/${ResourceId}
│              + arnTemplate: arn:${Partition}:arc-region-switch::${Account}:plan/${ResourceId}
├[~] service aws-pinpoint
│ └ resources
│    ├[~]  resource AWS::Pinpoint::EmailTemplate
│    │  └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
│    │         + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/EMAIL
│    ├[~]  resource AWS::Pinpoint::InAppTemplate
│    │  └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
│    │         + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/EMAIL
│    └[~]  resource AWS::Pinpoint::SmsTemplate
│       └      - arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/PUSH
│              + arnTemplate: arn:${Partition}:mobiletargeting:${Region}:${Account}:templates/${TemplateName}/SMS
└[~] service aws-ram
  └ resources
     └[~]  resource AWS::RAM::Permission
        └      - arnTemplate: arn:${Partition}:ram::${Account}:permission/${ResourcePath}
               + arnTemplate: arn:${Partition}:ram:${Region}:${Account}:permission/${ResourcePath}
```