chore: apply Socket optimized package overrides (#682)

## Summary
- apply Socket Optimize curated `@socketregistry` pnpm overrides
- retain existing vulnerability-pinning overrides
- update the pnpm lockfile with the optimized dependency graph

## Validation
- `socket optimize .` completed and added 10 overrides
- `git diff --check` passed
- `CI=true sfw pnpm install --frozen-lockfile` confirmed the lockfile
was current, then could not complete because the existing
`vercel-labs/node-vfs-polyfill` GitHub tarball failed local certificate
validation (`UNABLE_TO_GET_ISSUER_CERT_LOCALLY`)
- `pnpm format:check` could not run afterward because the incomplete
reinstall left `oxfmt` unavailable
- `npm audit --package-lock-only --omit=dev` is not applicable: this
pnpm repo has no npm `package-lock.json`