Sync package-lock.json with simplified overrides

Now that overrides only pins browserslist, re-resolve just the
browserslist-adjacent transitive packages (caniuse-lite,
electron-to-chromium, baseline-browser-mapping, node-releases,
update-browserslist-db) to what a real, unforced resolution picks,
verified against the actual private registry. They now hoist to
top-level instead of nesting under browserslist/. No other package
in the tree is touched.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: cx-sumit-morchhale