test: add 15 TypeScript security scanner fixtures

[WNZhao]

Summary

• add 15 inert TypeScript security-scanner fixtures under vulns/typescript/
• cover code/command/SQL injection, DOM XSS, traversal, credentials, randomness, SSRF, prototype pollution, regex DoS, redirects, log injection, partial comparison, unsafe deserialization, and archive traversal
• refresh generated vulnerability catalogs

Validation

• every .ts module parses and loads with Node 24 native type stripping; all payloads remain unreachable
• all 15 files contain both VULNERABLE: and SAFE: markers
• bash scripts/validate-test-case.sh (all 6 groups passed)
• git diff --check

All examples remain unreachable behind NEVER_RUN = false.