feat: add security sink detection patterns for JavaScript/TypeScript

- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations).
- Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns.
- Added `package-lock.json` for dependency management.

src/Policy/__Tests/StellaOps.Policy.Engine.Tests/Adapters/ExceptionAdapterTests.cs

@@ -41,7 +41,7 @@ public sealed class ExceptionAdapterTests : IDisposable
             _repositoryMock.Object,
             _effectRegistry,
             _cache,
-            Options.Create(_options),
+            Microsoft.Extensions.Options.Options.Create(_options),
             TimeProvider.System,
             NullLogger<ExceptionAdapter>.Instance);
     }
@@ -247,7 +247,7 @@ public sealed class ExceptionAdapterTests : IDisposable
             _repositoryMock.Object,
             _effectRegistry,
             _cache,
-            Options.Create(disabledCacheOptions),
+            Microsoft.Extensions.Options.Options.Create(disabledCacheOptions),
             TimeProvider.System,
             NullLogger<ExceptionAdapter>.Instance);
 
@@ -291,7 +291,7 @@ public sealed class ExceptionAdapterTests : IDisposable
             _repositoryMock.Object,
             _effectRegistry,
             _cache,
-            Options.Create(limitedOptions),
+            Microsoft.Extensions.Options.Options.Create(limitedOptions),
             TimeProvider.System,
             NullLogger<ExceptionAdapter>.Instance);