systeminformation resolution still allows 5.30.7 -- command injection in networkInterfaces() #3306

The root resolutions block pins systeminformation to ^5.24.0, and main's yarn.lock resolves it to 5.30.7. That version has two high-severity command injections in networkInterfaces() on Linux:

• GHSA-5xpp-75jx-m839 -- an interfaces(5) source directive path, fixed in 5.31.7
• GHSA-hvx9-hwr7-wjj9 -- a NetworkManager connection profile name, fixed in 5.31.6

The problem being is that it is reachable. packages/api/src/index.ts starts @opentelemetry/host-metrics, whose networkStats() calls networkInterfaces() on every metrics interval. The input is host network config, not a request. So it takes write access to the host's network config, and then it's code execution inside the API process.

one line change: bump the resolution to ^5.31.7 and re-lock.