chore(deps): pin sqlite3 build toolchain to patched versions via overrides

sqlite3@5.1.7 (final release, unmaintained) pulls node-gyp 8.x with
vulnerable tar/cacache/make-fetch-happen. Pinning the toolchain to
current patched versions clears 6 of the 7 remaining high advisories.
tsc build verified; sqlite3 installs via prebuilt binaries so the
node-gyp bump only affects the source-build fallback path.

The last high (langsmith) plus 9 moderates all sit behind the
langchain 0.3 -> 1.x migration and are left for a dedicated PR.