fix(deps): raise brace-expansion/minimatch to patched majors (dependency-review)

GHSA-mh99-v99m-4gvg covers brace-expansion <= 5.0.7 as one range, so pinning
the 1.x line to 1.1.16 did not satisfy it (dependency-review flagged the newly
introduced 1.1.16). Override brace-expansion to ^5.0.8 globally in website and
frontend, and minimatch to ^10.0.3 in frontend (js-beautify/editorconfig chain).

Both npm trees now report 0 vulnerabilities.

## Testing
- website: npm run build succeeds (160 docs), npm audit 0 vulns
- frontend: npm run build succeeds, vitest 55 files / 566 tests pass, npm audit 0 vulns

Author: Dumbris

frontend/package-lock.json

@@ -57,6 +57,8 @@
     "vue-tsc": "^3.3.8"
   },
   "overrides": {
-    "dompurify": "^3.4.12"
+    "dompurify": "^3.4.12",
+    "brace-expansion": "^5.0.8",
+    "minimatch": "^10.0.3"
   }
 }

frontend/package.json

@@ -45,12 +45,11 @@
   },
   "overrides": {
     "minimatch@9": "9.0.7",
-    "brace-expansion@1": "1.1.16",
-    "brace-expansion@5": "5.0.8",
     "serialize-javascript": "^7.0.5",
     "yaml": "^2.8.3",
     "sockjs": {
       "uuid": "^11.1.1"
-    }
+    },
+    "brace-expansion": "^5.0.8"
   }
 }