fix(deps): Resolve brace-expansion and serialize-javascript vulnerabilities (#374)

* fix(deps): resolve brace-expansion and serialize-javascript vulnerabilities via npm overrides

- brace-expansion: 1.1.12→1.1.13, 2.0.2→2.0.3 (GHSA-f886-m6hf-6m8v)
- serialize-javascript: 7.0.3→7.0.5 (GHSA-qj8w-gfj5-8c6v)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(deps): regenerate lockfile with Node 22 npm to match CI

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: tkislan

package-lock.json

@@ -2954,9 +2954,11 @@
         "lodash-es": "^4.17.23",
         "minimatch@>=8.0.0 <8.0.6": "8.0.7",
         "bn.js@<4.12.3": "4.12.3",
-        "serialize-javascript@<=7.0.2": "7.0.3",
+        "serialize-javascript@<7.0.5": "7.0.5",
         "undici@<6.24.0": "6.24.1",
         "flatted@<3.4.2": "3.4.2",
+        "brace-expansion@<1.1.13": "1.1.13",
+        "brace-expansion@>=2.0.0 <2.0.3": "2.0.3",
         "yaml": "2.8.3"
     }
 }