Fix dependabot vulnrability issues

[ilan7empest]

📝 Description

• Fix jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

---

🛠️ Changes Made

Update bfj package to a version not using jsonpath

✅ Checklist

• I have given the PR a well-structured title describing the domain and the specific change that was made
• I tested the changes in the browser (locally or via preview build)
• I confirmed that existing tests pass
• I added or updated unit / integration tests (if needed)
• I checked that this change doesn’t introduce new console warnings or lint / formatting errors
• I updated the relevant Jira ticket with the appropriate details and status

---

🔗 References

• Related ticket / issue: ML-12198
• Figma / design spec:
• Documentation:

---

🚨 Potentially Breaking Changes

• Yes
• No

---

Includes DRC change

• Yes
• No

If yes -> requires bump NPM version

---

🔍 Additional Notes

---

📸 Screenshots / Demos

---