fix(ci): regenerate root package-lock.json for codex's new @claude-flow/security dep

The CI Test Suite job runs plain `npm ci` at repo root (no v3 pnpm
install step), so it resolves workspace deps strictly from
package-lock.json — not from v3/pnpm-lock.yaml, which this PR had
already updated. codex/package.json's new @claude-flow/security
dependency was missing from package-lock.json's codex entry, so CI's
npm ci never linked it and every dual-mode test importing
orchestrator.ts failed with "Cannot find package '@claude-flow/security'".

Co-Authored-By: RuFlo <ruv@ruv.net>
Claude-Session: https://claude.ai/code/session_01RYP825phHMjPRmmjkcAWpq

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "claude-flow",
-  "version": "3.40.0",
+  "version": "3.41.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-flow",
-      "version": "3.40.0",
+      "version": "3.41.2",
       "bundleDependencies": [
         "@claude-flow/codex",
         "@claude-flow/mcp",
@@ -12953,6 +12953,7 @@
       "version": "3.0.3",
       "license": "MIT",
       "dependencies": {
+        "@claude-flow/security": "3.0.0-alpha.14",
         "@iarna/toml": "^2.2.5",
         "chalk": "^5.3.0",
         "commander": "^12.0.0",