Bump axios to resolve two HIGH security advisories in 0.27.x

[ehsan11513]

@polymarket/builder-relayer-client@0.0.8 pulls axios@^0.27.2, which GitHub flags for two HIGH severity advisories:

• GHSA-jr5f-v2jv-69x6 — SSRF / credential leakage via absolute URLs (affects <0.30.0)
• GHSA-43fc-jf86-j433 — DoS via __proto__ key in mergeConfig (affects <=0.30.2)

Current: axios@^0.27.2
Patched: axios@^1.15.0 resolves both, plus three additional HIGH advisories that surface on the 1.x line (1116673, 1116674, 1116675). A minimal bump to axios@0.30.3 would cover the two above if a 0.x → 1.x major is unwanted.

Downstream packages (e.g. @polymarket/clob-client, which moved to axios@^1.0.0 in v5) already run cleanly on axios 1.x, so the 1.x path looks safe.

Happy to open a PR if that helps.

[osr21]

Both CVEs are exploitable in a typical builder-relayer setup:

- **GHSA-jr5f-v2jv-69x6 (SSRF / credential leakage)** — When axios follows a redirect to an absolute URL on a different host, it forwards the `Authorization` header to the new host. The relayer signs requests with a builder API key or wallet credentials. Any redirect in the Polymarket API infrastructure (or an attacker-controlled URL injected via a crafted market parameter) could leak the API key to an unintended host.

- **GHSA-43fc-jf86-j433 (Prototype pollution / DoS)** — A `__proto__` key in a response JSON body's `config` can mutate `Object.prototype`. In a long-running relayer process, this can cause incorrect behavior in subsequent order processing.

**Recommended fix:** upgrade to `axios@^1.7.0` — both CVEs are patched in the 1.x series. The axios 1.x API is largely backward compatible; the main breaking change is that `axios.create()` no longer accepts `baseURL` as a positional argument.

```json
// package.json
"dependencies": {
"axios": "^1.7.0"
}
```

If a major bump is blocked, the minimum safe version for both CVEs is `0.30.0`, but `1.x` is strongly preferred since `0.x` is no longer maintained. An npm `overrides` field can patch the transitive dependency immediately while a proper bump is prepared:

```json
"overrides": {
"axios": "^1.7.0"
}
```