deps: Add lodash-es override to fix prototype pollution vulnerability

Override lodash-es to >=4.17.23 to fix GHSA-xxjr-mmjv-4gpg
(prototype pollution in _.unset and _.omit functions).

The vulnerability was in transitive dependencies from mermaid's
dependency chain (chevrotain, dagre-d3-es).

pnpm audit now reports: No known vulnerabilities found

Author: jhf

app/package.json

@@ -768,7 +768,8 @@
     ],
     "overrides": {
       "@types/react": "19.2.10",
-      "@types/react-dom": "19.2.3"
+      "@types/react-dom": "19.2.3",
+      "lodash-es": ">=4.17.23"
     }
   }
 }