UID2-7491: bump websocket-driver to 0.7.5 (CVE-2026-54466) (#200)

Add an npm overrides entry ("websocket-driver": "^0.7.5") to the two
affected React example projects and regenerate their package-lock.json,
upgrading websocket-driver 0.7.4 -> 0.7.5 to resolve CVE-2026-54466
(CRITICAL). websocket-driver is a dev-only transitive dependency
(webpack-dev-server hot reload); the deployed examples are static builds,
so the attack vector is not reachable in production.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Ticket: UID2-7491
Branch: syw-UID2-7491-websocket-driver

Author: sunnywu

web-integrations/google-secure-signals/react-client-side/package-lock.json

@@ -41,7 +41,8 @@
     "@babel/plugin-transform-modules-systemjs": ">=7.29.4",
     "fast-uri": ">=3.1.2",
     "shell-quote": "^1.8.4",
-    "ws": ">=7.5.11"
+    "ws": ">=7.5.11",
+    "websocket-driver": "^0.7.5"
   },
   "scripts": {
     "start": "node server.js",

web-integrations/google-secure-signals/react-client-side/package.json

@@ -41,7 +41,8 @@
     "@babel/plugin-transform-modules-systemjs": ">=7.29.4",
     "fast-uri": ">=3.1.2",
     "shell-quote": "^1.8.4",
-    "ws": ">=7.5.11"
+    "ws": ">=7.5.11",
+    "websocket-driver": "^0.7.5"
   },
   "scripts": {
     "start": "node server.js",