Use caret (^) prefix for React package versions

Updated react, react-dom, @types/react, and @types/react-dom to use
"^19.2.3" instead of "19.2.3" to match the convention used by other
dependencies in the project.

Co-authored-by: d10c <9970661+d10c@users.noreply.github.com>

Author: Copilot

extensions/ql-vscode/package-lock.json

@@ -2080,8 +2080,8 @@
     "nanoid": "^5.0.7",
     "p-queue": "^8.0.1",
     "proper-lockfile": "^4.1.2",
-    "react": "19.2.3",
-    "react-dom": "19.2.3",
+    "react": "^19.2.3",
+    "react-dom": "^19.2.3",
     "semver": "^7.6.2",
     "source-map": "^0.7.6",
     "source-map-support": "^0.5.21",
@@ -2135,8 +2135,8 @@
     "@types/js-yaml": "^4.0.6",
     "@types/node": "22.19.*",
     "@types/proper-lockfile": "^4.1.4",
-    "@types/react": "19.2.3",
-    "@types/react-dom": "19.2.3",
+    "@types/react": "^19.2.3",
+    "@types/react-dom": "^19.2.3",
     "@types/sarif": "^2.1.2",
     "@types/semver": "^7.5.8",
     "@types/stream-json": "^1.7.1",