Bump serve-static and pepr

Bumps [serve-static](https://github.com/expressjs/serve-static) to 1.16.2 and updates ancestor dependency [pepr](https://github.com/defenseunicorns/pepr). These dependencies need to be updated together.


Updates `serve-static` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...v1.16.2)

Updates `pepr` from 0.18.0 to 0.36.0
- [Release notes](https://github.com/defenseunicorns/pepr/releases)
- [Commits](defenseunicorns/pepr@v0.18.0...v0.36.0)

---
updated-dependencies:
- dependency-name: serve-static
  dependency-type: indirect
- dependency-name: pepr
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>