…on (#2037)

## Summary

- Add npm `overrides` to resolve all transitive dependency
vulnerabilities:
- `levelup` → override `bl` to 1.2.3 and `semver` to 5.7.2 (fixes memory
exposure and ReDoS via `mqtt-level-store`)
  - `pre-commit` → override `cross-spawn` to 7.0.6 (fixes ReDoS)
- `release-it` → override `undici` to 7.24.5 (fixes multiple HTTP
smuggling/memory/CRLF injection issues)
- Fix TypeScript compatibility with newer `@types/node` by casting
`tls.connect` options to `ConnectionOptions`
- Fix pre-existing prettier formatting issues in `client.ts` and
`is-browser.ts`

Result: `npm audit` reports **0 vulnerabilities** (down from 40 on the
original lockfile).

## Test plan

- [x] `npm audit` returns 0 vulnerabilities
- [x] `npm run build` succeeds
- [x] `npm test` passes (894 tests, 0 failures)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>