Update dev-dependency patch-package to 8.0.1

Transitive dependency tmp 0.0.33 is vulnerable and introduced via
patch-package 8.0.0 -> tmp 0.0.33

patched version: tmp 0.2.4 used by patch-package 8.0.1

Author: d10c

extensions/ql-vscode/package-lock.json

@@ -2122,7 +2122,7 @@
     "markdownlint-cli2": "^0.17.0",
     "markdownlint-cli2-formatter-pretty": "^0.0.7",
     "npm-run-all": "^4.1.5",
-    "patch-package": "^8.0.0",
+    "patch-package": "^8.0.1",
     "prettier": "^3.6.1",
     "storybook": "^8.6.14",
     "tar-stream": "^3.1.7",