Fix Dependabot dependency alerts

[appatalks]

Summary

• update all vulnerable brace-expansion lockfile instances to patched releases
• update Electron and tar to current compatible patched releases
• resolve all currently reported npm audit findings

Validation

• npm --prefix app audit --package-lock-only --json (0 vulnerabilities)
• npm --prefix app run check
• git diff --check origin/main...HEAD