chore: sync web client package-lock with installed deps

[AbirAbbas]

Summary

• Removes a stale dev: true marker on glob@10.5.0 so the lockfile matches the actual install graph (it's pulled in as a runtime transitive dep).

Test plan

• CI lockfile-check passes
• npm ci in control-plane/web/client succeeds

🤖 Generated with Claude Code

[github-actions]

📊 Coverage gate

Thresholds from .coverage-gate.toml: per-surface ≥ 86%, aggregate ≥ 88%, max per-surface regression ≤ 1.0 pp, max aggregate regression ≤ 0.50 pp.

Surface	Current	Baseline	Δ
control-plane	87.20%	87.30%	↓ -0.10 pp	🟡
sdk-go	90.70%	90.70%	→ +0.00 pp	🟢
sdk-python	93.63%	93.63%	↑ +0.00 pp	🟢
sdk-typescript	92.56%	92.56%	→ +0.00 pp	🟢
web-ui	90.02%	90.01%	↑ +0.01 pp	🟢
aggregate	88.98%	89.01%	↓ -0.03 pp	🟡

✅ Gate passed

No surface regressed past the allowed threshold and the aggregate stayed above the floor.

[github-actions]

📐 Patch coverage gate

Threshold: 80% on lines this PR touches vs origin/main (from .coverage-gate.toml:thresholds.min_patch).

Surface	Touched lines	Patch coverage	Status
control-plane	0	—	➖ no changes
sdk-go	0	—	➖ no changes
sdk-python	0	—	➖ no changes
sdk-typescript	0	—	➖ no changes
web-ui	0	—	➖ no changes

✅ Patch gate passed

Every surface whose lines were touched by this PR has patch coverage at or above the threshold.