chore: update dependencies and resolve audit warning

[ThomasK33]

Summary

• update npm dependencies that had newer stable releases available
• refresh the lockfile and apply the npm audit fix for brace-expansion
• keep typescript on 5.9.3 because the latest stable typescript-eslint still peers on <6.0.0

Dependency updates

• eslint 10.0.3 -> 10.1.0
• typescript-eslint 8.57.1 -> 8.57.2
• vitest 4.1.0 -> 4.1.2
• transitive audit fix: brace-expansion 5.0.4 -> 5.0.5

Validation

• npx playwright install chromium
• npm audit fix
• npm audit
• npm run verify

Notes

• npm audit reports 0 vulnerabilities after the fix.
• No design-doc deviations.

---

Generated with mux • Model: openai:gpt-5.4 • Thinking: xhigh