chore(deps): patch 3 Dependabot alerts (tmp, qs, ws) (#239)

Patches the 3 open Dependabot alerts, all transitive npm deps, following
the repo's existing `pnpm.overrides` pattern.

| # | Sev | Pkg | Was | Now | Source |
|---|-----|-----|-----|-----|--------|
| 75 | high | `tmp` | 0.2.5 | 0.2.7 | `@anthropic-ai/mcpb` →
external-editor |
| 74 | medium | `qs` | 6.15.1 | 6.15.2 | `express` / body-parser |
| 73 | medium | `ws` | 8.19.0 | 8.21.0 | `ink` (+ direct dep) |

## Changes
- Bump `tmp` override floor `^0.2.5` → `^0.2.6`
- Bump `qs` override floor `^6.15.1` → `^6.15.2`
- Add `ws` override `^8.20.1` and raise the direct `ws` dep floor
`^8.18.0` → `^8.20.1` so the ranges agree

## Verification
- `pnpm audit` → **No known vulnerabilities found**
- `pnpm build` (tsc) → clean
- Tests: 793/797 pass. The 4 failures are e2e tests hitting `401 Invalid
Authorization` (no API key in CI env) — unrelated to these bumps.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mrw-rl

package.json

@@ -89,7 +89,7 @@
     "ink-spinner": "5.0.0",
     "ink-text-input": "6.0.0",
     "react": "19.2.0",
-    "ws": "^8.18.0",
+    "ws": "^8.20.1",
     "tar-stream": "3.1.7",
     "yaml": "2.8.3",
     "zustand": "5.0.10"
@@ -99,8 +99,9 @@
       "esbuild"
     ],
     "overrides": {
-      "tmp": "^0.2.5",
-      "qs": "^6.15.1",
+      "tmp": "^0.2.6",
+      "qs": "^6.15.2",
+      "ws": "^8.20.1",
       "hono": "4.12.18",
       "@hono/node-server": "^1.19.14",
       "@modelcontextprotocol/sdk>ajv": "^8.18.0",