fix: add @xmldom/xmldom override to patch XML injection vulnerability (APS-18524)

Adds npm override for @xmldom/xmldom >=0.9.9 to fix GHSA-wh4c-j3r5-mjhp
(XML injection via unsafe CDATA serialization, CVSS 7.5).
The package is a transitive dev dependency.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: avinash-bharti

package.json

@@ -29,6 +29,7 @@
     "dotenv": "^16.0.0"
   },
   "overrides": {
-    "serialize-javascript": ">=7.0.3"
+    "serialize-javascript": ">=7.0.3",
+    "@xmldom/xmldom": ">=0.9.9"
   }
 }