fix: re-remove tar and undici from devDependencies (PRI-560)

The merge conflict resolution reverted the f0de1fa fix. Re-applied removal of duplicate tar@^7.5.11 and undici@^7.24.3 from devDependencies — both are already pinned via pnpm.overrides. Also removed the spurious overrides.lodash block that was reintroduced.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

package.json

@@ -52,12 +52,7 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-router-dom": "^5.3.0",
-    "tar": "^7.5.11",
     "typescript": "~5.6.2",
-    "undici": "^7.24.3",
     "vitest": "^3.0.5"
-  },
-  "overrides": {
-    "lodash": ">=4.18.0"
   }
 }