fix: cve and spring boot version bump

commons-beanutils:commons-beanutils (app.jar) │ CVE-2025-48734 org.apache.tomcat.embed:tomcat-embed-core (app.jar) │ CVE-2025-48988 org.springframework.boot:spring-boot (app.jar) │ CVE-2025-22235