fix(security): resolve Dependabot alert #5 for on-headers vulnerability

- Add npm override to force on-headers version ^1.1.0 to fix HTTP response header manipulation vulnerability
- Transitive dependency from serve@14.2.4 → compression@1.7.4 → on-headers@1.0.2 was vulnerable
- Override ensures all instances of on-headers use secure version 1.1.0 or later
- Verified with npm audit - no vulnerabilities found

Resolves: Dependabot alert #5
CVE: on-headers < 1.1.0 vulnerable to response header manipulation
Impact: Prevents inadvertent response header modification when array passed to response.writeHead()

Author: sayak-sarkar

package-lock.json

@@ -64,6 +64,9 @@
     "sharp": "^0.33.1",
     "shelljs": "^0.8.5"
   },
+  "overrides": {
+    "on-headers": "^1.1.0"
+  },
   "engines": {
     "node": ">=16.0.0",
     "npm": ">=8.0.0"