chore: Bump brace-expansion to 1.1.16 and 2.1.2

[ernst-dev]

Bumps brace-expansion to patched versions to address a Regular Expression Denial of Service (ReDoS) vulnerability (GHSA-3jxr-9vmj-r5cp, High).

Lockfile-only change (transitive dependency; package-lock.json only). Both vulnerable major-version lines present in the tree are bumped:

Line	From	To	Vulnerable range
v1 (brace-expansion)	1.1.15	1.1.16	< 1.1.16
v2 (glob, readdir-glob → brace-expansion)	2.1.1	2.1.2	>= 2.0.0, < 2.1.2

• Advisory: GHSA-3jxr-9vmj-r5cp
• Patched versions: 1.1.16 (v1), 2.1.2 (v2)

Opened by roko-dependabot-handler on behalf of @ernst-dev to remediate Dependabot alerts that had no auto-generated fix.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.06%. Comparing base (0ff0098) to head (ac107da).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #241   +/-   ##
=======================================
  Coverage   93.06%   93.06%           
=======================================
  Files          20       20           
  Lines         476      476           
  Branches       84       84           
=======================================
  Hits          443      443           
  Misses         29       29           
  Partials        4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.