release: @formio/js@5.3.6

[johnformio]

Automated sync from formio/nirvana for @formio/js@5.3.6 (monorepo 90f9df78da).

After merging, an engineer will tag the release:

git fetch origin
git tag v5.3.6 origin/master
git push origin v5.3.6

Generated by gh-workflows/bin/sync-oss.mjs.

[github-actions]

Sync verify: @formio/js@5.3.6

Compared this PR head against formio/nirvana@90f9df78dad931abc97dca572ebc5b4209a3b994.

❌ 2 critical drift entries. 0 informational entries.

Critical drift means the PR contains content that did not come from nirvana. Either roll the offending changes into nirvana (so they ship via the next sync) or, if the file is OSS-owned, add it to .github/sync-verify.yml's exclude: list and re-trigger.

Critical — OSS contains changes not in nirvana

• ➕ UNAUTHORIZED_OSS_FILE.md — extra file in OSS
• 📦 [dependencies] @formio/core — nirvana=^2.6.6, OSS=^99.99.99

_{workflow run · adjust drift policy in .github/sync-verify.yml}