chore(deps): resolve security advisories

[corwinm]

Summary

• resolve the open brace-expansion Dependabot alert across all affected major lines
• refresh the existing security overrides to patched brace-expansion releases
• also clear newly reported pnpm-audit findings for js-yaml, shell-quote, linkify-it, and fast-uri

Security context

• brace-expansion: 1.1.13 → 1.1.16, 2.0.3 → 2.1.2, and 5.0.6 → 5.0.8 (GHSA-3jxr-9vmj-r5cp)
• js-yaml: 4.2.0 → 4.3.0 (GHSA-52cp-r559-cp3m)
• shell-quote: 1.8.4 → 1.10.0 (GHSA-395f-4hp3-45gv)
• linkify-it: 5.0.1 → 5.0.2 (GHSA-v245-v573-v5vm)
• fast-uri: 3.1.2 → 3.1.4 (GHSA-4c8g-83qw-93j6 and GHSA-v2hh-gcrm-f6hx)

Validation

• pnpm check-types
• pnpm lint
• pnpm compile-tests
• pnpm package
• pnpm test (26 VS Code integration tests)
• pnpm audit (no known vulnerabilities)