[CU] Fix semver override

Description of Change

Overrides semver to ^7.5.3 in an attempt to resolve dependabot security alert

PR #185 added semver to package.json overrides, but not resolutions
This follow-up PR adds semver to resolutions which is Yarn's NPM equivalent to overrides
Restested in app to confirm no issues

Code reviewer validation:

General
- [x] PR is linked to ticket(s)
- [x] PR has changelog label applied if it's to be included in the changelog
- [x] Acceptance criteria:
  - All satisfied or
  - Documented reason for not being performed or
  - Split to separate ticket and ticket is linked by relevant AC(s)
- [x] Above PR sections adequately filled out
- [x] If any breaking changes, in accordance with the pre-1.0.0 versioning guidelines: a CU ticket has been created for the VA Mobile App detailing necessary adjustments with the package version that will be published by this ticket
Code
- [x] Tests are included if appropriate (or split to separate ticket)
- [x] New functions have proper TSDoc annotations

If changes warrant a new version per the versioning guidelines and the PR is approved and ready to merge: