fix(deps): regenerate package-lock.json and fix vulnerabilities

Regenerated the root lockfile to sync with current app/package.json
dependencies. Also ran npm audit fix to resolve:
- lodash Code Injection and Prototype Pollution (high severity)
- brace-expansion DoS (moderate severity)
- picomatch ReDoS and method injection (high severity)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: gkorland