Bump react and @types/react in /extensions/ql-vscode

Bumps [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). These dependencies needed to be updated together.

Updates `react` from 18.3.1 to 19.1.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.1.1/packages/react)

Updates `@types/react` from 18.3.12 to 19.1.12
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@types/react"
  dependency-version: 19.1.12
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

extensions/ql-vscode/package-lock.json

@@ -2021,7 +2021,7 @@
     "nanoid": "^5.0.7",
     "p-queue": "^8.0.1",
     "proper-lockfile": "^4.1.2",
-    "react": "^18.3.1",
+    "react": "^19.1.1",
     "react-dom": "^18.3.1",
     "semver": "^7.6.2",
     "source-map": "^0.7.6",
@@ -2078,7 +2078,7 @@
     "@types/js-yaml": "^4.0.6",
     "@types/node": "22.17.*",
     "@types/proper-lockfile": "^4.1.4",
-    "@types/react": "^18.3.12",
+    "@types/react": "^19.1.13",
     "@types/react-dom": "^18.3.1",
     "@types/sarif": "^2.1.2",
     "@types/semver": "^7.5.8",