fix(maps): backport attribution sanitizer fix without dropping WebGL1

package-lock.json

@@ -47,7 +47,7 @@
         "leaflet": "^1.9.4",
         "lucide-react": "^0.344.0",
         "mapbox-gl": "^3.22.0",
-        "maplibre-gl": "^5.24.0",
+        "maplibre-gl": "5.24.0",
         "marked": "^18.0.0",
         "plyr": "^3.8.4",
         "react": "^19.2.6",
@@ -99,7 +99,8 @@
         "vite": "8.1.0",
         "vite-plugin-pwa": "^1.3.0",
         "vitest": "^4.1.11"
-      }
+      },
+      "hasInstallScript": true
     },
     "client/node_modules/cookie": {
       "version": "1.1.1",