Possible DoS on regexes in packages/tlm-core-db/src/loader/tlmd.ts

[lsimons]

Silenced some sonarqube warnings at https://sonarcloud.io/project/security_hotspots?id=typelinkmodel_tlm&pullRequest=13&sinceLeakPeriod=true .

(This is a new rule in sonarcloud.)

[lsimons]

Resolved in code: the four flagged regexes in packages/tlm-core-db/src/loader/tlmd.ts (lines 26-32) now carry // NOSONAR S5852 suppressions with a documented rationale — the TLMD parser only consumes local, developer-authored files, not untrusted input, so ReDoS is not a realistic threat.