fix: visual-embed/spotter/query-decomposition/package.json & visual-embed/spotter/query-decomposition/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-15789761

Author: snyk-io[bot]

visual-embed/spotter/query-decomposition/package-lock.json

@@ -17,7 +17,7 @@
     "@thoughtspot/visual-embed-sdk": "1.40.0",
     "antd": "^5.24.5",
     "cors": "^2.8.5",
-    "express": "^4.18.2",
+    "express": "^4.22.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "react-markdown": "^10.1.0",