fix(security): remove env-controlled module path in crashReporter [APS-19013]

INJ-012: requireModule no longer honors process.env["browserStackCwd"] for
node_modules resolution. Module paths now come from process.cwd() (or the
internal browserstack-cypress-cli node_modules path when invoked with
internal=true), eliminating env-controlled module hijack (CWE-427).

Author: Jimesh-browserstack

bin/testObservability/crashReporter/index.js

@@ -27,9 +27,7 @@ let packages = {};
 
 exports.requireModule = (module, internal = false) => {
   let local_path = "";
-  if(process.env["browserStackCwd"]){
-   local_path = path.join(process.env["browserStackCwd"], 'node_modules', module);
-  } else if(internal) {
+  if(internal) {
     local_path = path.join(process.cwd(), 'node_modules', 'browserstack-cypress-cli', 'node_modules', module);
   } else {
     local_path = path.join(process.cwd(), 'node_modules', module);