chore(deps): bump brace-expansion overrides to patched versions

CI `pnpm audit --audit-level=high` flagged brace-expansion advisories
(GHSA-mh99-v99m-4gvg, GHSA-rgw5-rvv9-x895) in transitive deps via
@swc/cli>minimatch and @storybook/react-*. The existing overrides did not
cover the vulnerable ranges. Override brace-expansion 2.x to >=2.1.4 and
3.x-5.x to >=5.0.9. Audit at --audit-level=high now passes (only 2 moderate
advisories remain, below the high threshold).

Co-Authored-By: Aleksandr Kislitsyn <aleksandr.kislitsyn@gmail.com>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: aleksandrkislitsyn

package.json

@@ -15,7 +15,6 @@
 			"yaml": ">=2.8.3",
 			"picomatch": ">=4.0.4",
 			"file-type": ">=21.3.2",
-			"brace-expansion": ">=2.0.3 <3",
 			"defu": ">=6.1.5",
 			"vite": "^8.1.5",
 			"esbuild@>=0.27.3 <0.28.1": "0.28.1",
@@ -25,7 +24,8 @@
 			"@xhmikosr/decompress@<10.2.1": "10.2.1",
 			"ws@>=8.0.0 <8.21.0": "8.21.1",
 			"@babel/core@<=7.29.0": "7.29.7",
-			"brace-expansion": "^5.0.7"
+			"brace-expansion@>=2.0.0 <2.1.4": "2.1.4",
+			"brace-expansion@>=3.0.0 <5.0.9": "5.0.9"
 		}
 	},
 	"devDependencies": {