fix(deps): override tmp to patched version

Force tmp to 0.2.4 via pnpm overrides so production audit passes with @inquirer/prompts transitive dependencies.

Author: PatrickSys

package.json

@@ -185,7 +185,8 @@
       "readdirp>picomatch": "2.3.2",
       "minimatch": "10.2.3",
       "rollup": "4.59.0",
-      "hono@<4.12.7": ">=4.12.7"
+      "hono@<4.12.7": ">=4.12.7",
+      "tmp": "0.2.4"
     }
   }
 }