#190 address dependabot alerts for Handlebars.js in serverless

[Copilot]

This PR addresses the open Dependabot alert on transitive handlebars in the serverless workspace. The vulnerable resolution was pinned by upstream semver ranges, so the workspace now explicitly overrides to a patched release.

• Scope

  • serverless workspace only (no frontend/shared/runtime logic changes).

• Dependency remediation

  • Added an npm overrides entry in serverless/package.json to force handlebars to a patched line.
  • Keeps the fix targeted to the vulnerable transitive package without changing top-level dependency declarations.

• Lockfile update

  • Regenerated serverless/package-lock.json to apply the override.
  • node_modules/handlebars now resolves to 4.7.9 (from 4.7.8).

{
  "overrides": {
    "flatted": "^3.4.2",
    "handlebars": "^4.7.9",
    "rimraf": { "glob": "^10.5.0" }
  }
}