fix: patch CVE-2024-45296 path-to-regexp ReDoS via pnpm override (#2308)

Add a pnpm workspace override to force path-to-regexp@<0.1.10 to 0.1.10,
the patched version that adds backtrack protection. The vulnerable 0.1.7
was pulled in transitively via mintlify -> @mintlify/previewing -> express@4.
The 8.3.0 version used by express@5 is unaffected.

Fixes GHSA-9wv6-86v2-598j (Dependabot alert #61)

https://claude.ai/code/session_01ESE89rwkpWRsW8VfhrrEVu

Signed-off-by: Jan Pokorný <JenomPokorny@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>

Author: JanPokorny

pnpm-lock.yaml

@@ -1,3 +1,8 @@
+overrides:
+  # Fix CVE-2024-45296 / GHSA-9wv6-86v2-598j: path-to-regexp ReDoS vulnerability
+  # Transitive via mintlify -> @mintlify/previewing -> express@4.18.2
+  "path-to-regexp@<0.1.10": "0.1.10"
+
 packages:
   - apps/agentstack-ui
   - apps/beeai-web