feat: add security sink detection patterns for JavaScript/TypeScript

- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations).
- Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns.
- Added `package-lock.json` for dependency management.

src/VexLens/StellaOps.VexLens/Models/NormalizedVexModels.cs

@@ -27,6 +27,9 @@ public sealed record NormalizedVexDocument(
 [JsonConverter(typeof(JsonStringEnumConverter<VexSourceFormat>))]
 public enum VexSourceFormat
 {
+    [JsonPropertyName("UNKNOWN")]
+    Unknown,
+
     [JsonPropertyName("OPENVEX")]
     OpenVex,