fix: upgrade tar to ^7.5.7 to patch path traversal vulnerability

Security fix for CVE in node-tar package that allows arbitrary file
creation outside extraction directory via hardlink path traversal.

See: https://github.com/advisories/GHSA-9r2w-394v-53g6

Author: Alexandre Machado

package-lock.json

@@ -32,5 +32,8 @@
   },
   "engines": {
     "node": ">=18.0.0"
+  },
+  "overrides": {
+    "tar": "^7.5.7"
   }
 }