fix(deps): update dependency punycode to ^2.3.1

[metamask-ci]

This PR contains the following updates:

Package	Change	Age	Confidence
punycode (source)	^2.1.1 → ^2.3.1
@types/punycode (source)	^2.1.0 → ^2.1.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

---

Note

Low Risk
Lockfile and version-range updates only; punycode is used for IDN normalization in phishing checks, but behavior changes would come from the upstream library, not this repo’s code.

Overview
Updates @metamask/phishing-controller dependency ranges for punycode (^2.1.1 → ^2.3.1) and @types/punycode (^2.1.0 → ^2.1.4), with matching yarn.lock resolutions and Unreleased changelog entries. No source or test changes—Renovate maintenance only.

^{Reviewed by Cursor Bugbot for commit 0790dfe. Bugbot is set up for automated code reviews on this repo. Configure here.}