fix: resolve CVE alerts for transitive dependencies

[sapta100ms]

Summary

• Upgrade @100mslive/react-native-video-plugin devDependency from 1.1.0 to 1.1.3 in
  react-native-room-kit
• Add npm overrides/resolutions to fix Dependabot security alerts for vulnerable transitive
  dependencies:
  • fast-xml-parser 4.x → ^5.3.4 (in react-native-hms, react-native-room-kit)
  • vm2 3.10.0 → >=3.10.2 (in react-native-room-kit)
  • node-forge 1.3.1 → >=1.3.2 (in react-native-room-kit, room-kit example, expo demo)
  • tar <7.5.7 → >=7.5.7 (in rnhms-expo-demo)
• All vulnerabilities are in dev-only transitive dependencies (RN CLI, release-it) — no version bump
  or publish required

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.