fix(deps): bump websocket-driver to 0.7.5 (CVE-2026-54466) (#1046)

Add npm override forcing websocket-driver ^0.7.5 to remediate
CVE-2026-54466 (CRITICAL) flagged by Trivy. websocket-driver is a
dev-only transitive dependency (webpack-dev-server -> sockjs/
faye-websocket) and is not reachable in the static production build,
but a clean patch-level fix is available so we upgrade rather than
suppress.

UID2-7491

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Ticket: UID2-7491
Branch: syw-UID2-7491-websocket-driver-cve

Author: sunnywu

package-lock.json

@@ -65,7 +65,8 @@
     "@babel/plugin-transform-modules-systemjs": ">=7.29.4",
     "fast-uri": ">=3.1.2",
     "shell-quote": "^1.8.4",
-    "ws": ">=7.5.11"
+    "ws": ">=7.5.11",
+    "websocket-driver": "^0.7.5"
   },
   "browserslist": {
     "production": [