fix(deps): force joi >= 18.2.1 to resolve CVE-2026-48038 (Dependabot #516) (#7015)

joi < 18.2.1 throws an uncaught RangeError on deeply nested input through
recursive link() schemas (GHSA-q7cg-457f-vx79, CVE-2026-48038, DoS, medium).

joi is a transitive runtime dependency pulled in only by
@react-native-community/cli-config and @react-native-community/cli-types
("joi": "^17.2.1", resolved to 17.9.1). There is no 17.x patch; the fix
lands in 18.2.1, a major bump. Pin via a yarn resolution, matching the
existing pattern for other overrides in this block. The node>=20 engine
requirement of joi 18 is satisfied by the repo toolchain.

Author: osama-rizk

package.json

@@ -79,6 +79,7 @@
     "eslint-plugin-react-hooks": "^7.0.1",
     "@smithy/config-resolver": "^4.4.5",
     "@react-native-community/cli": "^17.0.1",
+    "joi": "^18.2.1",
     "**/@react-native-community/**/fast-xml-parser": "^5.7.2",
     "**/@aws-*/**/fast-xml-parser": "^5.7.2",
     "**/@aws-amplify/ui-angular-example/**/codelyzer/**/@angular/core": "19.2.20",