chore(deps): bump artillery 2.0.0-35 → ^2.0.33 to eliminate vm2

Replaces the early-2020 artillery prerelease pin in packages/e2e with the
current 2.0.33 release. This drops the legacy libhoney → superagent-proxy →
proxy-agent@5 → pac-resolver@5 → degenerator@3 → vm2 chain entirely, and
moves jsonpath-plus and fast-xml-parser onto patched lines.

Result (yarn.lock):
- vm2: REMOVED from the tree (closes the ~18 critical + high/medium vm2 alerts)
- jsonpath-plus: 7.2.0 → 10.4.0 (RCE advisory, GHSA-pppg-cpfq-h7wr et al.)
- fast-xml-parser: 4.2.5 → 5.x (entity-injection advisories)

artillery is a dev/e2e-only load-testing tool (not imported by SDK code).
Validated: `yarn build` green across all 21 workspaces; artillery CLI loads.
The e2e artillery scripts (artillery:stake-pool-query, artillery:wallet-restoration)
should be exercised in CI/e2e against a running stack.

Resolves #1702.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: rhyslbw

packages/e2e/package.json

@@ -142,7 +142,7 @@
     "@wdio/mocha-framework": "^7.19.5",
     "@wdio/spec-reporter": "^7.19.5",
     "@wdio/static-server-service": "^7.19.5",
-    "artillery": "^2.0.0-35",
+    "artillery": "^2.0.33",
     "axios-mock-adapter": "^2.0.0",
     "babel-loader": "^8.2.5",
     "blake2b-no-wasm": "2.1.4",