fix(security): override undici to ^6.23.0 to fix CVE-2026-22036 (#2006)

Add npm overrides to force undici to version 6.23.0 or higher to address
the unbounded decompression chain vulnerability in HTTP responses.

Resolves: GHSA-g9mf-h72j-4rw9

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: massongit

package-lock.json

@@ -29,6 +29,9 @@
   "engines": {
     "node": "24.13.0"
   },
+  "overrides": {
+    "undici": "^6.23.0"
+  },
   "standard": {
     "ignore": [
       "dist/"