[Aikido] Fix 4 critical issues in thirdweb, wagmi, @react-native-community/cli and 1 more

[aikido-autofix]

Upgrade thirdweb, wagmi, and React Native CLI to patch critical RCE vulnerability in Metro server and mitigate key compromise risks in transaction signing.

✅ 3 CVEs resolved by this upgrade, including 1 critical 🚨 CVE

This PR will resolve the following CVEs:

Issue	Severity	Description
AIKIDO-2025-10854	🚨 CRITICAL	Metro dev server in React Native CLI allows unauthenticated remote attackers to inject and execute arbitrary OS commands via crafted POST requests, with potential for full remote code execution, especially on Windows systems.
AIKIDO-2024-10466	MEDIUM	Signature algorithm vulnerability allows private key recovery by exploiting nonce reuse, enabling attackers to compromise cryptographic system security through repeated transaction signatures.
GHSA-qj3p-xc97-xw74	MEDIUM	Malicious debug@4.4.2 npm package could compromise dApp-to-wallet communication in browser contexts, potentially enabling unauthorized wallet interactions during a specific 2.5-hour window on Sept 8th, 2025.

🔗 Related Tasks

• https://linear.app/cube-labs/issue/CUB-2795/major-upgrade-for-react-native-communitycli

[changeset-bot]

⚠️ No Changeset found

Latest commit: 4389075

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

PR Summary

• Add pnpm overrides in root package.json to pin @react-native-community/cli and @react-native-community/cli-server-api to 17.0.1
• Update devDependencies:
  • packages/agw-react: bump thirdweb to 5.72.0-nightly-393d0cfb504401d6449a75cbe8422946d157fc93-20241202000349
  • packages/web3-react-agw: bump wagmi to ^2.17.1
• Minor JSON formatting/reordering in package.json files (arrays, peer deps order)

^{Written by Cursor Bugbot for commit 4389075. This will update automatically on new commits. Configure here.}