fix: prevent prototype pollution in objDeepCopy/objCopyProps

[MSNev]

Restrict _copyProps to only copy own properties using objHasOwnProperty and skip dangerous keys (proto, constructor, prototype) to prevent prototype pollution attacks during deep copy operations.

[Copilot]

Pull request overview

This PR addresses a prototype pollution vulnerability in objDeepCopy/objCopyProps by restricting copies to own properties and excluding dangerous keys (__proto__, constructor, prototype). It also adds a cross-env NODE_OPTIONS=--no-experimental-strip-types prefix to the node test scripts (presumably to keep ts-mocha working on newer Node versions).

Changes:

• In _copyProps, guard the iteration with objHasOwnProperty and skip __proto__, constructor, and prototype keys.
• Import the corresponding constants and the objHasOwnProperty helper.
• Update test:node / test:node_esnext to disable Node's experimental type-stripping via cross-env.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
lib/src/object/copy.ts	Restrict _copyProps to own, non-dangerous properties to prevent prototype pollution.
package.json	Wrap node test scripts with cross-env NODE_OPTIONS=--no-experimental-strip-types to ensure ts-mocha runs correctly.