fix: minimatch version resolution

[rohan-chaturvedi]

Summary

• Bump transitive minimatch 3.1.2 → 3.1.5 via yarn.lock update
• Bump transitive minimatch 9.0.5 → 9.0.9 via yarn.lock update
• Override minimatch 9.0.3 → 9.0.9 via yarn resolution (exact pin from @typescript-eslint/typescript-estree@6.21.0)

Resolves Dependabot alerts #259, #261, #263, #265, #266, #268 — ReDoS vulnerabilities in minimatch.

Context

Dependabot couldn't auto-fix these because minimatch is a deep transitive dependency pinned by lock file entries and one exact version pin. The 3.x instances (^3.0.4, ^3.0.5, ^3.1.2) were stale lock entries resolved to 3.1.2 — updated to 3.1.5 by refreshing the lock file. The 9.0.3 instance is an exact pin from @typescript-eslint/typescript-estree@6.21.0 (via eslint-config-next) — overridden with a scoped yarn resolution.

Verification

• npx tsc --noEmit — zero TypeScript errors
• npx jest --no-coverage — 223/223 tests pass

Test plan

• yarn lint passes without issues
• Staging build and runtime verified