Code execution via mock-factory key injection

Code injection in MSW mock generation in Orval before 8.21.0 allows attackers to execute code via crafted schema property names. In packages/core/src/getters/keys.ts, the getKey function wraps non-identifier property names in single quotes and emits them into generated object-literal keys without escaping embedded single quotes, letting a malicious name break out and inject a computed property expression that runs when the mock factory is called. Exposure requires generating MSW mocks from an attacker-controlled or attacker-influenced OpenAPI or Swagger specification and then executing the generated factory in tests or an MSW handler, affecting developer, CI, test, or application environments.