Remove duplicate GHSA-xqqr reference

[cookesan]

Removes the malformed duplicate hostr issue reference from GHSA-xqqr-p362-6rmc while leaving the clean issue reference intact.

Audit refresh, July 8, 2026:

• Confirmed the advisory still retains the clean upstream issue, GHSA, npm advisory, and NVD references.
• Confirmed the GHSA and NVD records for CVE-2017-16029 still resolve.
• Local checks passed: one advisory JSON file changed in the PR diff, JSON parses, git diff --check passes, and the worktree is clean.