chore: Add @puppeteer/browsers override to remove extract-zip

Add overrides: { '@wdio/utils>@puppeteer/browsers': '3.2.1' } (nested
path syntax required due to existing glob override) to force @wdio/utils
off @puppeteer/browsers 2.x (which requires extract-zip <= 2.0.1).
Addresses GHSA-jmr9-qjv8-65gv (CVE-2026-56876) via Rung 4 override.
No patched extract-zip version exists; override is the only path.

Author: amanabiy