Fix serialize-javascript CPU exhaustion DoS (GHSA-qj8w-gfj5-8c6v)

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>

Author: Copilot

package-lock.json

@@ -32,7 +32,8 @@
     "typescript-eslint": "^8.64.0"
   },
   "overrides": {
-    "@types/node": "^24.13.3"
+    "@types/node": "^24.13.3",
+    "serialize-javascript": "^7.0.5"
   },
   "scripts": {
     "build": "npm run build -w server && make -C client build && npm run build -w extensions/vscode",