fix(deps): patch brace-expansion vulnerabilities via overrides

Override brace-expansion@<2.0.3 to 2.0.3 and brace-expansion@>=4.0.0<5.0.5
to 5.0.5, resolving GHSA-f886-m6hf-6m8v (moderate: zero-step sequence
causes process hang and memory exhaustion). pnpm audit now reports zero
known vulnerabilities.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ericfitz

package.json

@@ -13,7 +13,9 @@
       "fast-xml-parser@<5.5.7": "5.5.7",
       "picomatch@>=4.0.0 <4.0.4": "4.0.4",
       "yaml@<1.10.3": "1.10.3",
-      "handlebars@>=4.0.0 <4.7.9": "4.7.9"
+      "handlebars@>=4.0.0 <4.7.9": "4.7.9",
+      "brace-expansion@<2.0.3": "2.0.3",
+      "brace-expansion@>=4.0.0 <5.0.5": "5.0.5"
     }
   },
   "scripts": {