chore: address Trivy production dependency vulnerabilities (#69)

Bump vulnerable production dependencies/overrides and refresh package-lock.json to clear Plugins develop Trivy findings.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: bigorn0

package-lock.json

@@ -115,7 +115,7 @@
         "@aws-sdk/client-schemas": "3.1045.0",
         "@hackolade/fetch": "1.1.0",
         "comment-json": "4.1.0",
-        "js-yaml": "4.2.0",
+        "js-yaml": "4.3.0",
         "lodash.get": "4.4.2",
         "lodash.isplainobject": "4.0.6",
         "lodash.partial": "4.2.1",
@@ -125,6 +125,7 @@
     "overrides": {
         "minimatch": "10.2.4",
         "fast-xml-parser": "5.7.3",
-        "fast-uri": "3.1.2"
+        "fast-uri": "3.1.4",
+        "brace-expansion": "5.0.8"
     }
-}
+}