add npm overrides to fix security vulnerabilities

Fixes axios, qs, form-data, tar-fs, brace-expansion, glob, semver,
tar, tough-cookie, and @babel/helpers vulnerabilities.

Remaining 4 moderate vulns are in prebuild's deprecated request dep
which cannot be fixed via overrides.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: TimelordUK