fix: Critical alert for es5-ext 0.10.60

[BruceHaley]

Fixes #minor

Description

Pipeline E2E_BF-Streaming-DL-ASE_Test is failing in task Component Detection with 1 Malware alert(s) rated at 'Critical’ severity. Malicious component found: es5-ext 0.10.60

npm ls es5-ext
react-app@0.1.0 C:\src\botbuilder-js\testing\streaming-e2e\react-app
`-- react-scripts@4.0.3
  `-- resolve-url-loader@3.1.4
    `-- es6-iterator@2.0.3
      +-- d@1.0.1
      | `-- es5-ext@0.10.60  deduped
      `-- es5-ext@0.10.60

I tried updating react-scripts to v 5.0.1, but that broke the build at step Build React App with "Can't resolve 'stream'".

Specific Changes

Override "es5-ext" downgrading it to "0.10.53". (0.10.60 is the latest version.)

This fix resolves the es5-ext 0.10.60 critical alert and stops the build from failing.

Add Component Governance task. This replaces the injected CG task, which only runs against the main branch. It makes testing CG fixes easier.

[coveralls]

Pull Request Test Coverage Report for Build 2187028115

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage decreased (-0.003%) to 84.482%

---

Totals
Change from base Build 2172847391:	-0.003%
Covered Lines:	19909
Relevant Lines:	22316

---

💛 - Coveralls