Fix dev security issue by updating microsoft api extractor

[jeffcharles]

Description of the change

Updates the @microsoft/api-extractor NPM package to the latest version supported by vite-plugin-dts.

Why am I making this change?

We have a couple open security warnings from minimatch and the current version of @microsoft/api-extractor is what's pulling in that version of minimatch. I don't know why Dependabot couldn't open a PR to resolve this automatically.

Checklist

• I've updated the default plugin import namespace and incremented the major version of javy-plugin-api if the QuickJS bytecode has changed.
• I've updated the relevant CHANGELOG files if necessary. Changes to javy-cli, javy-plugin, and javy-plugin-processing do not require updating CHANGELOG files.
• I've updated the relevant crate versions if necessary. Versioning policy for library crates
• I've updated documentation including crate documentation if necessary.