Security vulnerability in webpack-dev-server dependency

webpack-dev-server users' source code may be stolen when they access a malicious web site - https://github.com/advisories/GHSA-4v9v-hfq4-rm2v

The current @wordpress/scripts@30.20.0 depends on vulnerable webpack-dev-server <=5.2.0.

npm audit suggests fixing via `npm audit fix --force` which will downgrade @wordpress/scripts to 19.2.4, a breaking change.

Need to investigate a better fix, such as updating @wordpress/scripts to a version that uses a safe webpack-dev-server version, or overriding the dependency.

Current package.json has direct dependency on webpack-dev-server ^5.2.2, but @wordpress/scripts pulls in 4.15.2.