fix(deps): force adm-zip past CVE-2026-39244 via an override

Re-derived from PR #2485 as a resolution override rather than its direct-dep
bump: adm-zip reaches the tree only transitively (onnxruntime-node pins
^0.5.16), so a top-level copy at 0.6.0 would leave onnxruntime-node loading
the vulnerable 0.5.17 — which is exactly what the scanner PR's own lockfile
showed. The override forces every resolution to ^0.6.0.

Co-authored-by: anupamme <anupamme@users.noreply.github.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

package.json

@@ -81,6 +81,7 @@
     "xterm-addon-fit": "^0.8.0"
   },
   "overrides": {
+    "adm-zip": "^0.6.0",
     "basic-ftp": "5.3.1"
   },
   "patchedDependencies": {