fix(deps): patch brace-expansion + postcss high-severity advisories (#609)

Adds `overrides` for two transitive dev-tooling advisories failing the
Node.js Audit on main: **brace-expansion** DoS
([GHSA-mh99-v99m-4gvg](GHSA-mh99-v99m-4gvg))
→ `^5.0.9`, **postcss** path traversal
([GHSA-r28c-9q8g-f849](GHSA-r28c-9q8g-f849))
→ `^8.5.25`. Verified: `bun install` + build + test (75/75) pass.

Author: CybotTM

bun.lock

@@ -47,5 +47,9 @@
 	},
 	"resolutions": {
 		"minimatch": ">=9.0.7"
+	},
+	"overrides": {
+		"brace-expansion": "^5.0.9",
+		"postcss": "^8.5.25"
 	}
 }