fix: resolve dependency security vulnerabilities

Upgrade lint-staged from v12 to v15.5.2 and add pnpm overrides to
force patched versions of vulnerable transitive dev dependencies:
- hermes-engine >=0.10.0 (critical, Dependabot #68)
- braces >=3.0.3 (high, Dependabot #70)
- micromatch >=4.0.8 (medium, Dependabot #71)
- http-proxy-agent >=5.0.0 (removes @tootallnate/once, low, Dependabot #72)

The ip SSRF vulnerability (#69) remains unresolved as no patched
version exists and it requires a react-native major version upgrade.

Author: quantizor

package.json

@@ -50,7 +50,7 @@
     "enzyme-to-json": "^3.3.1",
     "husky": "^9.1.7",
     "jest": "^27.3.1",
-    "lint-staged": "^12.1.1",
+    "lint-staged": "^15.5.2",
     "preact": "^10.0.0-beta.2",
     "preact-render-to-json": "^3.6.6",
     "pretty-format": "^27.5.1",
@@ -94,5 +94,13 @@
   },
   "overrides": {
     "cheerio": "1.0.0-rc.12"
+  },
+  "pnpm": {
+    "overrides": {
+      "micromatch": ">=4.0.8",
+      "braces": ">=3.0.3",
+      "http-proxy-agent": ">=5.0.0",
+      "hermes-engine": ">=0.10.0"
+    }
   }
 }