chore: address Trivy production dependency vulnerabilities (#81)

Bump vulnerable production dependencies/overrides and refresh package-lock.json to clear Plugins develop Trivy findings.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: bigorn0

package-lock.json

@@ -105,6 +105,7 @@
     },
     "overrides": {
         "minimatch": "10.2.4",
-        "fast-xml-parser": "5.7.3"
+        "fast-xml-parser": "5.7.3",
+        "brace-expansion": "5.0.8"
     }
 }