fix: resolve npm audit security vulnerabilities

Add overrides to patch vulnerable transitive dependencies in fs-js-lite's
request dependency chain:
- form-data >=2.5.4 (critical: unsafe random boundary)
- qs >=6.14.1 (moderate: arrayLimit bypass DoS)
- tough-cookie >=5.1.2 (moderate: prototype pollution)

Remaining unfixable: pm2 ReDoS (no fix available), request SSRF
(deprecated package, fs-js-lite upstream dependency).

Author: atomantic

package-lock.json

@@ -44,6 +44,15 @@
     "lodash.sample": "^4.2.1",
     "yargs": "^18.0.0"
   },
+  "overrides": {
+    "fs-js-lite": {
+      "request": {
+        "form-data": "^2.5.4",
+        "qs": "^6.14.1",
+        "tough-cookie": "^5.1.2"
+      }
+    }
+  },
   "devDependencies": {
     "@playwright/test": "^1.58.2",
     "@types/supertest": "^7.2.0",