Docs npm-tar vulnerability (#680)

Fix npm-tar vulnerability (CVE-2026-23745) by upgrading to 7.5.4

- Added pnpm override to force tar >= 7.5.3
- Updated pnpm-lock.yaml to use tar@7.5.4
- Resolves TOO-351

Co-authored-by: Cursor Agent <cursoragent@cursor.com>

Author: evantahler

package.json

@@ -104,5 +104,10 @@
       "pnpm dlx ultracite fix "
     ]
   },
-  "packageManager": "pnpm@10.11.0"
+  "packageManager": "pnpm@10.11.0",
+  "pnpm": {
+    "overrides": {
+      "tar": ">=7.5.3"
+    }
+  }
 }