chore(deps-dev): remediate audit warnings

[TheRealAgentK]

Summary

• update transitive development dependency brace-expansion from 5.0.7 to 5.0.9
• update transitive development dependency fast-uri from 3.1.4 to 3.1.5
• clear the remaining high-severity development dependency audit findings

This is a lockfile-only change. Neither package is included in the published production dependency tree.

Validation

• npm audit --omit=dev — 0 vulnerabilities
• npm audit — 0 vulnerabilities
• npm run prepare
• npm test — 13 passing
• npm run eslint
• npm run tseslint
• npm run prettier:check