chore(deps): fix high-severity vulnerabilities via pnpm overrides

Uses pnpm overrides to force patched versions of transitive
dependencies with known high-severity vulnerabilities:

- picomatch: ^4.0.4 (ReDoS, GHSA-c2c7-rcm5-vvqj)
- path-to-regexp: ^8.4.0 (DoS, GHSA-j3q9-mxjg-w52f)
- lodash-es: ^4.18.0 (code injection, GHSA-r5fr-rjxr-66jc)
- lodash: ^4.18.0 (code injection, GHSA-r5fr-rjxr-66jc)
- esbuild: ^0.28.1 (RCE, GHSA-gv7w-rqvm-qjhr)
- fastify: ^5.8.5 (validation bypass, GHSA-247c-9743-5963)

All 6 high-severity advisories are now resolved. Remaining
vulnerabilities are 18 moderate and 1 low, all in dev dependencies.

Author: mroderick

package.json

@@ -5,6 +5,15 @@
   "private": true,
   "type": "module",
   "packageManager": "pnpm@10.32.1",
+  "pnpm": {
+    "overrides": {
+      "picomatch": "^4.0.4",
+      "path-to-regexp": "^8.4.0",
+      "lodash-es": "^4.18.0",
+      "lodash": "^4.18.0",
+      "esbuild": "^0.28.1"
+    }
+  },
   "keywords": [
     "hono",
     "express",