Add parse-server batch routeAllowList fix commit reference

[cookesan]

Adds the upstream merge commit for parse-community/parse-server#10482 to GHSA-p84r-h6rx-f2xr.

Evidence checked:

• PR #10482 addresses the routeAllowList batch sub-request bypass.
• Commit 552c6dd extracts shared routeAllowList matching and re-enforces it for each batch sub-request.
• Release 9.9.1-alpha.3 names GHSA-p84r-h6rx-f2xr, PR #10482, and commit 552c6dd.
• The 9.9.1-alpha.2...9.9.1-alpha.3 compare contains the merge commit.
• The npm parse-server 9.9.1-alpha.3 package points at the release commit and contains the fixed built files.

[cookesan]

Rechecked this reference-only PR while keeping the open Advisory Database queue current.

• The patch adds the parse-server batch routeAllowList fix commit reference and normalizes the file's trailing newline; it does not change affected ranges, package metadata, or severity.
• The commit resolves to 552c6dd754638c9f546fbceecd2ba0f7225a95d1.
• The commit subject explicitly references GHSA-p84r-h6rx-f2xr.

No advisory data fields are changed.