fix: patch form-data security vuln (CVE-2025-7783)

- Add npm override to upgrade jsdom's form-data dependency from 3.0.1 to 3.0.4
- CVE-2025-7783: form-data <3.0.4 uses predictable Math.random() for multipart boundaries
- Targeted override preserves axios's form-data 4.x while patching jsdom's 3.x dependency
- Regenerate client and root package-lock.json files

Author: dialmaster

client/package-lock.json

@@ -62,5 +62,10 @@
       "src/**/*.{ts,tsx,js,jsx}",
       "!src/types/**"
     ]
+  },
+  "overrides": {
+    "jsdom": {
+      "form-data": "^3.0.4"
+    }
   }
 }