fix(deps): patch picomatch to >= 4.0.4 / >= 2.3.2 (CVE-2026-33671)

ReDoS via crafted extglob patterns causing catastrophic backtracking.

Refs: CIP-2936

Author: tobyhede

package.json

@@ -64,6 +64,8 @@
       "next": ">=15.5.10",
       "ajv": ">=8.18.0",
       "esbuild@<=0.24.2": ">=0.25.0",
+      "picomatch@^4": ">=4.0.4",
+      "picomatch@^2": ">=2.3.2",
       "rollup@>=4.0.0 <4.59.0": ">=4.59.0"
     },
     "peerDependencyRules": {