Fix code scanning alert no. 204: Prototype-polluting function

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

lib/utils/merge.mjs

@@ -40,6 +40,7 @@ export default function mergeDeep(target, ...sources) {
     for (const key in source) {
 
       if (Object.getPrototypeOf(source) !== Object.getPrototypeOf({})) continue;
+      if (key === "__proto__" || key === "constructor") continue;
 
       if (source[key] instanceof HTMLElement) {
         console.warn(source[key])