fix: js-yaml 脆弱性アラートを pnpm overrides で解消

[devin-ai-integration]

Summary

js-yaml@<=4.1.1 の脆弱性 GHSA-h67p-54hq-rp68 (MODERATE: merge key の繰り返し alias による Quadratic-complexity DoS) を解消。

# pnpm-workspace.yaml
overrides:
+  js-yaml@<=4.1.1: '>=4.2.0'

js-yaml@3.14.2 (prh 経由) と js-yaml@4.1.1 (textlint/rc-config-loader 経由) の 2 バージョンが js-yaml@5.2.0 に統一された。make lint (textlint) 動作確認済み。

Link to Devin session: https://app.devin.ai/sessions/4872a05528d04921a8e7a65d72394bf3

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring