fix(security): bump lodash 4.17.23 → 4.18.1 in examples/js (ENG-14277)

Adds overrides entry to block GHSA-r5fr-rjxr-66jc (CVE-2026-4800, CVSS HIGH):
lodash _.template code injection via options.imports key names, fixed in 4.18.0.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: andriy-sudo

examples/js/package-lock.json

@@ -26,6 +26,7 @@
   "overrides": {
     "axios": "^1.15.0",
     "flatted": "^3.4.2",
+    "lodash": "^4.18.0",
     "minimatch": "^3.1.3"
   }
 }