fix(deps): bump tar override to 7.5.10 to patch GHSA-qffp-2rhf-9h96 (#55)

Adds tar@7.5.10 to npm overrides. Transitive dep via
electron-builder > app-builder-lib > tar. Hardlink path traversal
via drive-relative linkpath (high severity).

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: GhostTypes

package-lock.json

@@ -46,7 +46,8 @@
   },
   "license": "MIT",
   "overrides": {
-    "js-yaml": "4.1.1"
+    "js-yaml": "4.1.1",
+    "tar": "7.5.10"
   },
   "dependencies": {
     "@cycjimmy/jsmpeg-player": "^6.1.2",