fix(deps): override tmp and tar-fs to patched versions

- Added override for `tmp` to ^0.2.4
- Forced `tar-fs` to 3.1.0 to address CVE-2025-59343 (symlink validation bypass)
- Ensures Dependabot alerts are resolved by pinning safe versions

Author: mridang

package-lock.json

@@ -68,6 +68,7 @@
     "oauth4webapi": "^3.6.0"
   },
   "overrides": {
-    "tmp": "^0.2.4"
+    "tmp": "^0.2.4",
+    "tar-fs": "3.1.0"
   }
 }