fix(security): address remaining Dependabot alerts

- Upgrade lodash 4.17.21 → 4.17.23 in scripts and evals packages
- Remove stale package-lock.json files in sdk/test directories that had outdated transitive dependencies (diff, ai)

Closes remaining 8 Dependabot alerts

Author: brandonkachen

bun.lock

@@ -39,7 +39,7 @@
     "@oclif/parser": "^3.8.17",
     "async": "^3.2.6",
     "diff": "^8.0.2",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "p-limit": "^6.2.0",
     "zod": "^4.2.1"
   },

evals/package.json

@@ -24,7 +24,7 @@
     "@ai-sdk/openai-compatible": "^1.0.19",
     "@codebuff/bigquery": "workspace:*",
     "@codebuff/common": "workspace:*",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   },
   "devDependencies": {
     "@types/bun": "^1.3.5",