chore: Remediate 1 Dependabot security alert (puppeteer-core upgrade)

Bump puppeteer-core from ^22.15.0 to 25.7.0 to eliminate extract-zip.
Add overrides: { '@puppeteer/browsers': '^3.2.0' } to force off 2.x.
Rung 3 (direct devDep bump) + Rung 4 (overrides for transitive).

Alert addressed:
- GHSA-jmr9-qjv8-65gv (extract-zip CVE-2026-56876, high)

Author: amanabiy