fix(security): Override tar to ^7.5.6 to fix high vulnerabilities

Add npm override for tar package to address:
- GHSA-8qq5-rm4j-mr97: Arbitrary File Overwrite and Symlink Poisoning
- GHSA-r6q2-hw4h-h46w: Race Condition via Unicode Ligature Collisions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: scalvert

package-lock.json

@@ -124,6 +124,9 @@
   "engines": {
     "node": ">=20.0.0"
   },
+  "overrides": {
+    "tar": "^7.5.6"
+  },
   "publishConfig": {
     "registry": "https://registry.npmjs.org"
   },