fix(security): bump fast-xml-parser past XMLBuilder injection (Dependabot #30) (#208)

Upstream advisory GHSA-gh4j-gqv2-49f6 (CWE-91, XML Injection): the
XMLBuilder in fast-xml-parser < 5.7.0 fails to escape XML comment and
CDATA section delimiters, allowing a caller to inject `-->` or
`]]>` into untrusted input and break out of a comment/CDATA context
when serializing. Severity: MODERATE.

fast-xml-parser is a transitive dev dependency reaching us via
@aws-sdk/xml-builder (devDep of @aws-sdk/client-bedrock-runtime),
which pinned it at exact 5.5.8. Added an `overrides` entry pinning
fast-xml-parser to ^5.7.0; npm now resolves it to 5.7.2 across the
tree.

- npm audit: 0 vulnerabilities
- npm test: 884 passing (28 suites), 0 failures

Refs: https://github.com/getaxonflow/axonflow-sdk-typescript/security/dependabot/30
Advisory: GHSA-gh4j-gqv2-49f6

Author: saurabhjain1592

package-lock.json

@@ -81,6 +81,9 @@
   "dependencies": {
     "openai": "^6.15.0"
   },
+  "overrides": {
+    "fast-xml-parser": "^5.7.0"
+  },
   "publishConfig": {
     "access": "public",
     "provenance": true