Mobile PR #427 updates the existing YAML parser overrides to 3.15.2 and 4.3.2, fixing GHSA-2883-xcg3-v3hh without changing native dependencies.

Lint, TypeScript, and 1746 tests passed (11 skipped). The audit no longer reports js-yaml; eight other high entries in the image-size/Expo/Metro chain remain outside this fix. Maestro was unavailable, and no native Android/iOS build was run. The PR targets staging and is not yet merged.