[codex] Remediate esbuild alerts

[nahremenkova1]

Summary

• Add an npm override for esbuild 0.28.1 because tsup 8.5.1 still declares esbuild ^0.27.0.
• Regenerate package-lock.json so esbuild and @esbuild/* optional platform packages resolve to 0.28.1.
• Update transitive dev audit dependencies: form-data 4.0.6 and js-yaml 4.2.0 via a targeted override for @redocly/openapi-core.
• Clears npm audit findings for the remediation branch.

Validation

• npm audit --audit-level=moderate
• npm test
• npm run typecheck
• npm run build
• GitHub PR checks: Unit Tests and CodeQL passing