fix: bump axios and adm-zip for security advisories (AX-173)

Raise axios to ^1.20.0 and adm-zip to ^0.6.1 so that npm audit reports
no high-severity advisories in production dependencies.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: Hive Agent

CHANGELOG.md

@@ -5,6 +5,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Security
+- Bumped `axios` to `^1.20.0` and `adm-zip` to `^0.6.1` to resolve
+  high-severity npm audit advisories in production dependencies.
 
 ## [1.28.0] - 2026-08-11
 ### Added

package-lock.json

@@ -20,8 +20,8 @@
     ],
     "dependencies": {
         "@types/node": ">=12.0",
-        "adm-zip": "^0.6.0",
-        "axios": "^1.19.0",
+        "adm-zip": "^0.6.1",
+        "axios": "^1.20.0",
         "form-data": "^3.0.5",
         "loglevel": ">=1.6.2"
     },