fix(deps): bump form-data

[agent-horton]

Summary

• add pnpm overrides to force vulnerable form-data ranges to patched versions
• update pnpm-lock.yaml so form-data 2.x resolves to 2.5.6 and 4.x resolves to 4.0.6

Addresses Dependabot alerts #306, #727, #797, #798.

Checks

• pnpm install --frozen-lockfile --ignore-scripts --config.engine-strict=false
• pnpm exec prettier --check package.json pnpm-lock.yaml
• pnpm --if-present run build
• pnpm --if-present test

Note: a full pnpm install with lifecycle scripts was attempted first, but examples/.shared prepare requires SST_STAGE; the frozen install was rerun with --ignore-scripts.

[github-actions]

Electric Agents Desktop Builds

Build artifacts for commit d25f6de.

Platform	Status	Artifact
macOS Apple Silicon	Passed	DMG
macOS Intel	Passed	DMG
Windows x64	Passed	Installer
Linux x64	Passed	AppImage / deb

Workflow run

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.28%. Comparing base (6587781) to head (d25f6de).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4627      +/-   ##
==========================================
+ Coverage   59.24%   59.28%   +0.03%     
==========================================
  Files         385      385              
  Lines       42734    42734              
  Branches    12273    12271       -2     
==========================================
+ Hits        25316    25333      +17     
+ Misses      17343    17326      -17     
  Partials       75       75              

Flag	Coverage Δ
packages/agents	72.96% <ø> (ø)
packages/agents-mcp	77.70% <ø> (ø)
packages/agents-mobile	80.67% <ø> (ø)
packages/agents-runtime	83.36% <ø> (-0.02%)	⬇️
packages/agents-server	75.52% <ø> (+0.25%)	⬆️
packages/agents-server-ui	7.51% <ø> (ø)
packages/electric-ax	47.62% <ø> (ø)
packages/experimental	87.73% <ø> (ø)
packages/react-hooks	86.48% <ø> (ø)
packages/start	82.83% <ø> (ø)
packages/typescript-client	91.83% <ø> (ø)
packages/y-electric	56.05% <ø> (ø)
typescript	59.28% <ø> (+0.03%)	⬆️
unit-tests	59.28% <ø> (+0.03%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Electric Agents Mobile Build

Local mobile checks ran for commit d25f6de.

The EAS Android preview build was skipped because the mobile-eas-build label is not present.
Add the mobile-eas-build label to this PR to produce an installable preview build.

Workflow run