grafana-bridge: add npm overrides for quick-win Dependabot alerts

grafana-bridge is a minimal Express app (single dep) but still pulls
in the same vulnerable transitive packages. Adds an 'overrides'
block to force patched versions:

  lodash               -> ^4.18.0
  qs                   -> ^6.15.2
  picomatch            -> ^2.3.2
  fast-uri             -> ^3.1.2
  serialize-javascript -> ^7.0.5

Regenerated package-lock.json. Verified qs pinned at 6.15.2.

Author: wfr-data-acquisition

server/installer/grafana-bridge/package-lock.json

@@ -8,5 +8,12 @@
   },
   "dependencies": {
     "express": "^4.21.0"
+  },
+  "overrides": {
+    "lodash": "^4.18.0",
+    "qs": "^6.15.2",
+    "picomatch": "^2.3.2",
+    "fast-uri": "^3.1.2",
+    "serialize-javascript": "^7.0.5"
   }
 }