chore: upgrade mongoose to v8.10.x for security

[FinleyGe]

I have checked the migration guide: https://mongoosejs.com/docs/migrating_to_8.html#removed-overwrite-option-for-findoneandupdate

There are several breaking changes but there are NO breaking changes in our code.

So it is safe to upgrade to 8.x