fix: update webpack to resolve CVEs

[dannyneira]

Summary

• Updates the direct development dependency webpack in build_ts/package.json from ^5.69.1 to ^5.107.2
• Refreshes build_ts/package-lock.json so the installed webpack version is 5.107.2
• Resolves the selected webpack Dependabot alert group:
  • https://github.com/warpdotdev/workflows/security/dependabot/9 — critical, Cross-realm object access in Webpack 5, patched in 5.76.0
  • https://github.com/warpdotdev/workflows/security/dependabot/14 — moderate, AutoPublicPathRuntimeModule DOM clobbering/XSS, patched in 5.94.0
  • https://github.com/warpdotdev/workflows/security/dependabot/20 — low, buildHttp allowedUris redirect bypass, patched in 5.104.0
  • https://github.com/warpdotdev/workflows/security/dependabot/21 — low, buildHttp URL userinfo allow-list bypass, patched in 5.104.1

Advisory references

• GHSA-hc6q-2mpp-qw7j
• GHSA-4vvj-4cpr-p986
• GHSA-38r7-794h-5758
• GHSA-8fgc-7cc6-rx7x

Verification

• npm --prefix build_ts audit --json: confirms webpack is no longer reported
• npm --prefix build_ts run build: passes; webpack 5.107.2 compiled successfully

Notes

• This is a direct development dependency update.
• No workaround was needed; the direct webpack version range was bumped above all patched versions.
• Dependabot had no recorded error for these alerts.

Conversation: https://staging.warp.dev/conversation/2dcce629-7225-4e52-8205-e8ce5c3f4def
Run: https://oz.staging.warp.dev/runs/019e7ec3-8c46-7b78-b3f4-df67139b9f87
This PR was generated with Oz.

[vorporeal]

seems reasonable