feat: add security sink detection patterns for JavaScript/TypeScript

- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations).
- Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns.
- Added `package-lock.json` for dependency management.

src/__Libraries/StellaOps.Router.Gateway/OpenApi/OpenApiDocumentGenerator.cs

@@ -9,7 +9,7 @@ namespace StellaOps.Router.Gateway.OpenApi;
 /// <summary>
 /// Generates OpenAPI 3.1.0 documents from aggregated microservice schemas.
 /// </summary>
-internal sealed class OpenApiDocumentGenerator : IOpenApiDocumentGenerator
+public sealed class OpenApiDocumentGenerator : IOpenApiDocumentGenerator
 {
     private readonly IGlobalRoutingState _routingState;
     private readonly OpenApiAggregationOptions _options;