fix: update vulnerable transitive dependencies (#1851)

Add npm overrides to resolve Dependabot security alerts:
- serialize-javascript: 6.0.2 → 7.0.5 (CVE-2026-34043, GHSA-5c6j-r48x-rmvq)
- glob: 10.4.5 → 13.0.6 (CVE-2025-64756)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: chagong