fix(examples): bump electron to 43.x to resolve extract-zip Dependabot alerts

[devin-ai-integration]

Summary

Resolves both open Dependabot alerts on this repo (#230 GHSA-jmr9-qjv8-65gv, #231 GHSA-7pqw-9j4j-h8q3 — symlink path traversal in extract-zip <= 2.0.1, high severity).

extract-zip has no patched release; it only reaches examples/basic-javascript transitively via electron@39. Electron ≥ 40.x replaced it with @electron-internal/extract-zip (and @electron/get 2 → 5, which also drops the whole got/global-agent subtree from the lockfile).

examples/basic-javascript/package.json:

-    "electron": "^39.8.9"
+    "electron": "^43.6.0"

Lockfile regenerated with npm install --package-lock-only --ignore-scripts electron@43.6.0. Picked 43.6.0 (2026-09-04) rather than latest 44.3.0 (2026-09-08) to stay within the repo's 3-day minimumReleaseAge. The example only uses app/BrowserWindow, so there is no API impact.

Link to Devin session: https://app.devin.ai/sessions/a0916bebb3bb42fbac10888144103435
Open in Devin Desktop: https://app.devin.ai/desktop/session/a0916bebb3bb42fbac10888144103435?variant=devin
Requested by: @mishushakov

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring