Fix Dependabot security vulnerability in follow-redirects

- Added follow-redirects 1.16.0 override in package.json
- Addresses alert #170: follow-redirects leaks custom auth headers
  to cross-domain redirect targets (medium severity)
- Updated from 1.15.11 to 1.16.0 across axios and http-proxy chains

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-Authored-By: Claude Opus 4.6 (1M context)(Internal only) <noreply@anthropic.com>

Author: 3 people

package-lock.json

@@ -1886,6 +1886,7 @@
     "picomatch@2": "^2.3.2",
     "picomatch@4": "^4.0.4",
     "flatted": "^3.4.2",
-    "defu": "^6.1.5"
+    "defu": "^6.1.5",
+    "follow-redirects": "1.16.0"
   }
 }