fix: override brace-expansion package security alert

[yeojz]

Summary

• Adds pnpm override for brace-expansion@>=4.0.0 <5.0.5 → >=5.0.5 to resolve GHSA-f886-m6hf-6m8v (moderate: zero-step sequence causes process hang and memory exhaustion)
• Vulnerability path: @typescript-eslint/eslint-plugin → minimatch → brace-expansion

Test plan

• pnpm audit returns no vulnerabilities
• All tests pass (1158/1158)

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	100% (🎯 100%)	1556 / 1556
🔵	Statements	100% (🎯 100%)	1577 / 1577
🔵	Functions	100% (🎯 100%)	346 / 346
🔵	Branches	100% (🎯 100%)	824 / 824

File Coverage

No changed files found.

Generated in workflow #366 for commit aad54c6 by the Vitest Coverage Report Action

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (295acdc) to head (aad54c6).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #824   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           59        59           
  Lines         1996      1996           
  Branches       428       404   -24     
=========================================
  Hits          1996      1996           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[codecov]

Bundle Report

Bundle size has no change ✅