[release/10.0] Update NPM dependencies

[wtgodbe]

Fixes CG alerts

[Copilot]

Pull request overview

Updates NPM dependency constraints/lockfiles on the release/10.0 branch to address CG security alerts across the repo’s JS/TS workspaces.

Changes:

• Bump @typescript-eslint/* to v8 in the JSInterop workspace.
• Add/adjust root overrides to force patched transitive dependency versions (e.g., tar, serialize-javascript, @tootallnate/once).
• Refresh package-lock.json to reflect the new resolved graph.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
src/JSInterop/Microsoft.JSInterop.JS/src/package.json	Updates TypeScript ESLint tooling versions used by the JSInterop workspace.
package.json	Adds additional root-level overrides to remediate vulnerable transitive deps.
package-lock.json	Locks updated dependency graph/resolutions produced by the override/tooling updates.