fix: oada/services/well-known/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728

oada/services/well-known/package.json

@@ -37,7 +37,7 @@
     "@fastify/helmet": "^11.1.1",
     "@oada/formats-server": "^3.5.3",
     "@oada/lib-config": "^3.7.0",
-    "@oada/lib-prom": "workspace:^",
+    "@oada/lib-prom": "3.5.1",
     "@oada/pino-debug": "^3.7.0",
     "@oada/well-known-json": "^4.0.2",
     "allow-methods": "^6.1.0",