fix(deps): align brace-expansion/js-yaml manifests with lockfile

Bump direct pins so package.json matches the lockfile importer
specifiers and frozen-lockfile CI stays green.

Author: FJ-Riveros

package.json

@@ -17,10 +17,10 @@
     "@solana/web3.js": "^1.95.2",
     "axios": "^1.18.0",
     "base-x": "^3.0.11",
-    "brace-expansion": "^5.0.8",
+    "brace-expansion": "^5.0.9",
     "dotenv": "^16.4.5",
     "form-data": "^4.0.6",
-    "js-yaml": "^3.15.0"
+    "js-yaml": "^3.15.1"
   },
   "packageManager": "pnpm@11.3.0",
   "engines": {