fix(deps): update vulnerable transitive dependencies

[YehuiTang0316]

Merge blocked: The user requires the original Dependabot issue to be fixed before merging. Keep this PR in draft until GHSA-86w9-cpqp-85rv is actually remediated in the dependency tree and the updated head passes regression tests and all CI checks. Current CI success does not resolve the advisory.

The lockfile contains fixable shell-quote command-injection and source-map-js denial-of-service vulnerabilities. Update shell-quote from 1.10.0 to 1.12.0 and source-map-js from 1.2.1 to 1.2.2 within their existing parent dependency ranges.

Dependabot alert #3 remains unfixed: node-forge 1.4.0 has no published patched release for GHSA-86w9-cpqp-85rv. The reviewed Gear paths disable TLS termination, reject global sandbox policy drift, and do not call forge signature verification. Record this bounded reachability assessment and reassessment conditions in docs/dependency-security.zh-CN.md, and extend the sandbox regression tests for TLS/MITM policy drift. The alert is left open.

The lockfile updates apply to this repository's installs; downstream npm consumers must update and audit their own lockfiles.

Validation on macOS with Node 26.7.0:

• npm ci, npm run typecheck, and npm run build passed.
• npm run test:sandbox:platform: 4 files passed, 20 tests passed, 3 skipped (2 Linux-only checks and the real IPython test because IPython is unavailable).
• npm pack --dry-run --ignore-scripts --json passed (396 packaged files).
• npm audit --json: the shell-quote and source-map-js advisories are gone; exits 1 for the remaining node-forge advisory, reported against forge and its sandbox-runtime parent (2 high entries, 0 critical).
• git diff --check passed.

References: shell-quote advisory, source-map-js advisory, pending forge fix.

All six GitHub CI jobs for commit 95c38e42a9abe7de78754ea613e7dec940407547 passed: CI run 38095734784.