Bump mongoose from 8.8.3 to 8.9.5 in /shopper

Bumps [mongoose](https://github.com/Automattic/mongoose) from 8.8.3 to 8.9.5.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@8.8.3...8.9.5)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

shopper/package-lock.json

@@ -15,7 +15,7 @@
     "express": "4.21.2",
     "express-session": "1.18.1",
     "ioredis": "4.27.2",
-    "mongoose": "8.8.3",
+    "mongoose": "8.9.5",
     "mysql2": "3.9.8",
     "pug": "3.0.3",
     "sequelize": "6.29.0"