shopware/core: SVG uploads allow stored XSS

SVG files are allowed in the media manager upload whitelist but are not sanitized, enabling stored XSS via malicious SVG content.

All admin users who upload SVG files and all users who view them in the Shopware application.

Remove SVG from allowed_extensions or implement SVG sanitization using a library like enshrined/svg-sanitize.