fix: Upgrade glob to 10.5.0 to fix command injection vulnerability (CVE-2025-64756)

Add npm override to force glob to version >=10.5.0, fixing a high severity
command injection vulnerability in the glob CLI's -c/--cmd option that allows
arbitrary command execution when processing files with malicious names.

The vulnerable glob 10.4.5 was a transitive dependency of mocha 11.0.1.

Author: claude

package-lock.json

@@ -72,7 +72,9 @@
 		"tsc-silent": "^1.2.2",
 		"typescript": "^5.7.3"
 	},
-	"overrides": {},
+	"overrides": {
+		"glob": "^10.5.0"
+	},
 	"engines": {
 		"node": ">=22.0.0"
 	}