Bump picomatch from 2.3.1 to 2.3.2 in /client_js

Summary:
Bumps picomatch from 2.3.1 to 2.3.2.

Release notes
Sourced from picomatch's releases 2.3.2
This is a security release fixing several security relevant issues.
What's Changed
fix: exception when glob pattern contains constructor by Jason3S in micromatch/picomatch#144
Fix for CVE-2026-33671
Fix for CVE-2026-33672
Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Differential Revision: D99481725

fbshipit-source-id: 43aa3c6c75d6ee200a26fad2657d26bd1f136010

Author: ppwang-sa