Fix dependency audit for brace-expansion

[SilasZhr]

Summary

• bump the brace-expansion override from 5.0.5 to 5.0.6
• refresh package-lock.json to resolve GHSA-jxxr-4gwj-5jf2

Context

PR #49 is failing the dependency-check job because npm audit now flags brace-expansion versions 5.0.2 through 5.0.5. This is a maintainer-level dependency fix and should land on main rather than being added to the external contributor's token-data PR.

Validation

• npm ci
• npm audit --audit-level moderate
• npx prettier --check package.json package-lock.json
• git diff --check
• npm test