Fix Dependabot security vulnerabilities (#132, #133)

- Updated tar override from ^7.5.8 to ^7.5.10 (resolves to 7.5.11)
  Addresses #133: Hardlink Path Traversal via Drive-Relative Linkpath (high)
- Added @tootallnate/once override ^3.0.1
  Addresses #132: Incorrect Control Flow Scoping (low)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: priyanshu92

package-lock.json

@@ -1858,7 +1858,8 @@
     "@octokit/plugin-paginate-rest": "^9.2.2",
     "@octokit/request-error": "^5.1.1",
     "qs": "^6.14.2",
-    "tar": "^7.5.8",
+    "tar": "^7.5.10",
+    "@tootallnate/once": "^3.0.1",
     "lodash": "^4.17.23",
     "minimatch": "^10.2.3",
     "serialize-javascript": "^7.0.3",