chore: resolve open dependabot security alerts

[jonathannorris]

Summary

Resolved 5 open Dependabot security alerts by adding npm overrides for transitive dependencies.

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#40	brace-expansion	medium	Override <1.1.13 → 1.1.13
#32	flatted	high	Override <=3.4.1 → 3.4.2
#33, #34	picomatch	high/medium	Override <2.3.2 → 2.3.2
#36	picomatch	medium	Override >=4.0.0 <4.0.4 → 4.0.4

[Copilot]

Pull request overview

Resolves multiple open Dependabot security alerts by forcing patched versions of vulnerable transitive npm dependencies via root-level overrides, and updating the lockfile accordingly.

Changes:

• Added npm overrides in package.json to pin patched versions of brace-expansion, flatted, and picomatch.
• Updated package-lock.json to reflect the overridden dependency resolutions.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Adds overrides entries to pin patched transitive dependency versions.
package-lock.json	Updates resolved versions/integrity hashes for overridden transitive dependencies.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.