Fix CSP violation in Vite builds by upgrading asn1.js to 5.4.1

Fixes #28

Added npm overrides to force asn1.js@5.4.1, which removes eval usage that caused Content Security Policy violations in Vite builds. The previous version (4.10.1) used require('vm').runInThisContext() which is incompatible with strict CSP.

Dependency chain: browserify → crypto-browserify → browserify-sign → parse-asn1 → asn1.js

Verified zero eval() calls in all dist bundles after rebuild.

Author: protobi-pieter

package-lock.json

@@ -152,5 +152,8 @@
     "sax": "^1.2.4",
     "ts-node": "^8.10.2",
     "typescript": "^3.9.7"
+  },
+  "overrides": {
+    "asn1.js": "5.4.1"
   }
 }