chore(deps): pin typescript to ~4.9 to block transitive major upgrades

semantic-release@25 → cosmiconfig@9 declares typescript: '>=4.9.5', which
npm's fresh dependency resolution was picking up as typescript@6.0.3.
This caused dependabot PRs to fail CI on prepare-script tsc invocations.

Using ~ instead of ^ allows patch updates within 4.9.x while blocking
accidental minor/major upgrades through transitive resolution. A future
TypeScript 5.x upgrade will be a deliberate, separate PR.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: sid88in

package-lock.json

@@ -41,7 +41,7 @@
     "serverless": "^3.25.1",
     "ts-jest": "^29.4.11",
     "ts-node": "^10.9.1",
-    "typescript": "^4.9.3"
+    "typescript": "~4.9.3"
   },
   "dependencies": {
     "@graphql-tools/merge": "^8.3.12",