Pin axios to 1.13.5 to avoid compromised version (#1528)

* Pin axios to 1.13.5 to avoid compromised version

- Remove caret from axios override to pin exactly to 1.13.5
- Prevents npm from resolving to axios@1.14.1 which was found to
  contain a Remote Access Trojan via hijacked npm credentials
- axios is a transitive dep via @fluidframework/server-services-client

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Update package-lock.json with pinned axios 1.13.5

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Priyanshu Agrawal <priyanshuag@Priyanshus-MacBook-Pro.local>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 3 people

package-lock.json

@@ -1852,7 +1852,7 @@
     "utf-8-validate": "^5.0.9"
   },
   "overrides": {
-    "axios": "^1.13.5",
+    "axios": "1.13.5",
     "tmp": "^0.2.4",
     "@octokit/request": "^8.4.1",
     "@octokit/plugin-paginate-rest": "^9.2.2",