chore(deps): bump cors from 2.8.5 to 2.8.6 in /reference-apps/nodejs

Bumps [cors](https://github.com/expressjs/cors) from 2.8.5 to 2.8.6.
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](expressjs/cors@v2.8.5...v2.8.6)

---
updated-dependencies:
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

reference-apps/nodejs/package-lock.json

@@ -25,7 +25,7 @@
   "license": "MIT",
   "dependencies": {
     "amqplib": "^0.10.3",
-    "cors": "^2.8.5",
+    "cors": "^2.8.6",
     "express": "^5.2.0",
     "express-rate-limit": "^8.2.1",
     "helmet": "^8.1.0",