chore(security): bump tar in cli-v3 + override for supervisor k8s chain

Author: nicktrn

package.json

@@ -90,6 +90,7 @@
       "express@^4>body-parser": "1.20.3",
       "@remix-run/dev@2.17.4>tar-fs": "2.1.4",
       "testcontainers@10.28.0>tar-fs": "3.1.1",
+      "tar@>=7 <7.5.11": "^7.5.11",
       "form-data@^2": "2.5.4",
       "form-data@^3": "3.0.4",
       "form-data@^4": "4.0.4",

packages/cli-v3/package.json

@@ -140,7 +140,7 @@
     "std-env": "^3.7.0",
     "strip-ansi": "^7.1.0",
     "supports-color": "^10.0.0",
-    "tar": "^7.5.4",
+    "tar": "^7.5.13",
     "tiny-invariant": "^1.2.0",
     "tinyexec": "^0.3.1",
     "tinyglobby": "^0.2.10",