fix(deps): resolve brace-expansion, http-cache-semantics and serialize-javascript Snyk/npm-audit findings (+Claude) (#238)

Raise the brace-expansion override floors to the patched releases
(^5.0.12, ^2.1.7, ^1.1.21) for SNYK-JS-BRACEEXPANSION-20244948,
-20244950 and -20244952, and refresh http-cache-semantics (4.3.0) and
serialize-javascript (7.1.2) in the lockfile.

Retire the ajv, fast-uri, proxy-addr and istanbul-lib-processinfo
overrides, which no longer change what the tree resolves.

#claude_code#
🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>

Author: dhruv-parekh-cs

package-lock.json

@@ -107,7 +107,6 @@
     "prepare": "husky"
   },
   "overrides": {
-    "ajv": "^8.18.0",
     "eslint": {
       "ajv": "^6.12.6"
     },
@@ -116,23 +115,18 @@
     },
     "qs": "^6.16.0",
     "tmp": "^0.2.4",
-    "fast-uri": "^3.1.8",
-    "proxy-addr": "^2.0.8",
     "minimatch@10.2.5": {
-      "brace-expansion": "^5.0.9"
+      "brace-expansion": "^5.0.12"
     },
     "minimatch@9.0.9": {
-      "brace-expansion": "^2.1.4"
+      "brace-expansion": "^2.1.7"
     },
     "minimatch@5.1.9": {
-      "brace-expansion": "^2.1.4"
+      "brace-expansion": "^2.1.7"
     },
     "serialize-javascript": "^7.1.0",
     "diff": "^8.0.3",
-    "brace-expansion@1": "^1.1.18",
-    "istanbul-lib-processinfo": {
-      "uuid": "^11.1.1"
-    }
+    "brace-expansion@1": "^1.1.21"
   },
   "engines": {
     "node": ">=22.0.0"