fix: resolve tar symlink path traversal vulnerability (CVE)

Override tar to >=7.5.11 to fix high severity dependabot alert

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: GudE-R

package-lock.json

@@ -13,6 +13,9 @@
         "lint:web": "npm run lint -w @studytodo/web",
         "test": "npm test -ws --if-present"
     },
+    "overrides": {
+        "tar": ">=7.5.11"
+    },
     "devDependencies": {
         "react-test-renderer": "^19.1.0",
         "typescript": "^5.0.0"