fix: override vulnerable dependencies (sha.js, Babel helpers/runtime)

[adeelahmad6834]

Summary

This PR updates Flowise’s dependency resolution to patch known vulnerabilities flagged by OWASP Dependency-Check:

• sha.js: upgraded via override to >= 2.4.12
  • Advisory: GHSA-95m3-7q98-8xr5 (Critical, RCE vector)
• @babel/helpers and @babel/runtime: upgraded via override to >= 7.26.10
  • Advisory: GHSA-23rh-42f3-5vmq (Moderate)

Changes:

• Added overrides block in root package.json
• Regenerated pnpm-lock.yaml with pnpm install --lockfile-only

Security Rationale

• Before: Security scans flagged 1 Critical (sha.js) and multiple Moderates.
• After: Critical reduced to 0 in Dependency-Check rollup.

ASVS Reference

• ASVS 14.2.2: Ensure components (libraries, frameworks) are up-to-date and verified against known vulnerabilities.
• ASVS 14.2.4: Use software composition analysis to manage third-party components.

Impact

• No runtime code changes.
• Safe, minimal modification; improves supply chain security.
• Validated with DevSecOps pipeline (artifacts available).

---