deps: tar@7.5.22 (#9843)

## Summary

Updates the bundled `tar` dependency from `7.5.19` to `7.5.22` on the
latest npm 12 branch.

This resolves
[GHSA-r292-9mhp-454m](https://github.com/advisories/GHSA-r292-9mhp-454m),
which affects `tar` versions through `7.5.20`. All production dependency
paths now resolve to `tar@7.5.22`.

## Testing

- `node . run dependencies --ignore-scripts`
- `node . ls tar --all --omit=dev`
- `node . audit --omit=dev --json` reports no `tar` vulnerability
- `node . test --ignore-scripts` reports the environment-specific
`EXDEV` failure in `test/bin/windows-shims.js`; all other tests pass

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>