fix Dependabot / npm audit vulnerabilities

[JillRegan]

What has changed

• Ran npm audit fix to bump packages that allow safe updates (ajv, flatted, undici, and other resolvable minimatch instances).
• @1password/eslint-config latest still pulls @typescript-eslint/* versions that depend on a vulnerable nested minimatch (9.0.0–9.0.6). npm audit fix can’t fix and upgrading won't either. Added an overrides entry for minimatch so the tree resolves to a patched version without waiting on a new eslint-config release.

Note: The override only affects dev tooling (ESLint / TypeScript-ESLint used for lint). It does not change the published action’s runtime bundle or end-user behavior, so there’s no impact on the action’s core execution path.

How to test

1. Checkout this branch
2. Run npm audit to see found 0 vulnerabilities