fix: override lodash >=4.18.0 to patch code injection vulnerability

GHSA-r5fr-rjxr-66jc is a code injection vulnerability in lodash
below 4.18.0. The vulnerable transitive dependency comes through
@kinvolk/headlamp-plugin.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

package.json

@@ -56,5 +56,8 @@
     "typescript": "~5.6.2",
     "undici": "^7.24.3",
     "vitest": "^3.0.5"
+  },
+  "overrides": {
+    "lodash": ">=4.18.0"
   }
-}
+}