chore(deps): bump brace-expansion overrides to patched versions

CI `pnpm audit --audit-level=high` flagged brace-expansion advisories
(GHSA-mh99-v99m-4gvg, GHSA-rgw5-rvv9-x895) in transitive deps via
@swc/cli>minimatch and @storybook/react-*. The existing overrides did not
cover the vulnerable ranges. Override brace-expansion 2.x to >=2.1.4 and
3.x-5.x to >=5.0.9. Audit at --audit-level=high now passes.

Co-Authored-By: Aleksandr Kislitsyn <aleksandr.kislitsyn@gmail.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: aleksandrkislitsyn

package.json

@@ -16,9 +16,8 @@
 			"picomatch": ">=4.0.4",
 			"file-type": ">=21.3.2",
 			"brace-expansion@<1.1.12": "1.1.12",
-			"brace-expansion@>=2.0.0 <2.0.2": "2.0.2",
-			"brace-expansion@>=3.0.0 <3.0.1": "3.0.1",
-			"brace-expansion@>=4.0.0 <4.0.1": "4.0.1",
+			"brace-expansion@>=2.0.0 <2.1.4": "2.1.4",
+			"brace-expansion@>=3.0.0 <5.0.9": "5.0.9",
 			"defu": ">=6.1.5",
 			"vite": "^8.1.5",
 			"fast-xml-parser@<5.7.0": ">=5.7.0",