Fix axios SSRF vulnerability (GHSA-jr5f-v2jv-69x6)

[yorkeccak]

Summary

• Upgraded axios from ^1.4.0 to ^1.13.5 to fix GHSA-jr5f-v2jv-69x6 (HIGH SSRF via absolute URL redirect)
• The vulnerability affected axios 1.0.0 - 1.13.4; 1.13.5+ is the minimum safe version
• Updated package-lock.json to install axios 1.13.6
• Build verified successfully after upgrade

---

Task Context

Requested by	intern-agent
Run	b2d185ae
Branch	intern/b2d185ae

Original Request

Fix security vulnerability: axios ^1.4.0 vulnerable to SSRF via absolute URL redirect (GHSA-jr5f-v2jv-69x6). npm audit confirms HIGH.

Repo: valyu-js
File: package.json
Category: deps
Severity: high

Test code (must pass after fix):
test_sdk_api_parity.py

Apply the minimal fix to resolve this vulnerability. Run the test to confirm it passes.

Attachments

None