chore(deps): mitigate high audit by overriding basic-ftp

[aretw0]

Summary

• add npm override for basic-ftp to 5.2.2
• update lockfile accordingly
• keep changes minimal (no bulk dependency merge)

Why

• CI quality job fails on high advisory for basic-ftp <= 5.2.1
• this mitigation removes high severity without forcing major dependency shifts

Tracking

• Part of dependency convergence tracked in Automated Dependency Updates Report #6

Validation

• local hook checks passed on feature branch (lint/type-check/unit/advisory security)
• npm audit now reports only moderate issues in tooling chain (yaml-language-server via @astrojs/check)

Residual risk

• moderate yaml advisory remains and requires breaking path (npm audit fix --force)
• propose separate controlled track for tooling-major updates

[aretw0]

Closing as superseded by #8. The relevant dependency convergence changes are already merged into develop via PR #8.