fix: refresh lockfile for npm audit

[mulhamna]

Summary

• refresh package-lock to resolve vulnerable brace-expansion transitive dependency
• keeps dependency graph otherwise unchanged

Verification

• npm audit --audit-level=high
• npm test
• npm run lint
• npm run format:check

Fixes scheduled Security workflow failure from npm audit.