feat: shared UUID

[brunozoric]

Summary

• Add uuid() to @webiny/stdlib — a RFC 4122 v4 UUID generator that works in both Node.js and browser environments
• Uses native crypto.randomUUID() when available (Node.js, secure browser contexts) and falls back to a manual implementation using crypto.getRandomValues() for insecure (HTTP)
  contexts
• No external dependencies — built entirely on platform built-ins

Design

The fallback exists because crypto.randomUUID() throws in browsers served over HTTP (requires a secure
context). crypto.getRandomValues() has no such restriction, so the manual path covers
that gap.

The function lives in src/common/utils/uuid/ (platform-agnostic) and is exported from @webiny/stdlib.

  import { uuid } from "@webiny/stdlib";

  const id = uuid(); // "f47ac10b-58cc-4372-a567-0e02b2c3d479"

Test plan

• Returns valid UUID v4 format (regex match)
• Version nibble is 4, variant bits are 8, 9, a, or b
• 1000 successive calls produce 1000 unique values
• Lowercase hex, correct hyphen positions
• Fallback path produces valid UUIDs when crypto.randomUUID is unavailable
• Fallback path uniqueness (1000 calls)