fix: override @xmldom/xmldom to >=0.9.10 to resolve XML injection vulnerability (#60)

@xmldom/xmldom@0.8.11 has a high severity vulnerability (XML injection via
unsafe CDATA serialization). Both plist@3.1.0 and @expo/plist@0.5.2 pin to
^0.8.8 which won't resolve to 0.9.x under semver. This override forces the
patched version.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: Dhruwang

package.json

@@ -16,6 +16,11 @@
     "typescript": "6.0.2",
     "rimraf": "6.1.3"
   },
+  "pnpm": {
+    "overrides": {
+      "@xmldom/xmldom": "0.9.10"
+    }
+  },
   "packageManager": "pnpm@10.33.0",
   "engines": {
     "node": "^20.19.0 || >=22.12.0"