fix: remove need for unsafe-eval

As we are still using `commonjs` in our `tsconfig.json` this commit uses
`#paths` to overwrite the import path for the types only.

The types are the same now, but could theoretically drift in the future.

lib/dataconnection/StreamConnection/Cbor.ts

@@ -1,5 +1,5 @@
 import type { Peer } from "../../peer.js";
-import { Decoder, Encoder } from "cbor-x";
+import { Decoder, Encoder } from "cbor-x/index-no-eval";
 import { StreamConnection } from "./StreamConnection.js";
 
 const NullValue = Symbol.for(null);

tsconfig.json

@@ -8,7 +8,10 @@
 		"skipLibCheck": true,
 		"isolatedModules": true,
 		"resolveJsonModule": true,
-		"lib": ["es2020", "dom"]
+		"lib": ["es2020", "dom"],
+		"paths": {
+			"cbor-x/index-no-eval": ["./node_modules/cbor-x"]
+		}
 	},
 	"exclude": ["node_modules", "dist", "e2e"]
 }