Remove unused tar-fs dependency to fix symlink validation bypass vulnerability

Co-authored-by: manast <95200+manast@users.noreply.github.com>

Author: Copilot

package-lock.json

@@ -28,7 +28,6 @@
     "latest-version": "^9.0.0",
     "lodash": "^4.17.21",
     "semver": "^7.7.1",
-    "tar-fs": "npm:tar-fs@2.1.3",
     "ws": "^8.17.0"
   },
   "devDependencies": {