fix(deps): force shell-quote >=1.8.4 via override to fix CVE-2026-9277 (UID2-7289) (#1030)

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: cYKatherine

package-lock.json

@@ -63,7 +63,8 @@
     "picomatch": "^2.3.2",
     "lodash": "^4.18.0",
     "@babel/plugin-transform-modules-systemjs": ">=7.29.4",
-    "fast-uri": ">=3.1.2"
+    "fast-uri": ">=3.1.2",
+    "shell-quote": "^1.8.4"
   },
   "browserslist": {
     "production": [