Update brace-expansion to 5.0.12

[bvolpato]

Summary

The lockfile pins brace-expansion@5.0.9, which npm audit flags for denial-of-service vulnerabilities in the lint tooling dependency tree.

Changes

Update the locked transitive dependency to 5.0.12, including its registry URL and integrity checksum.

Testing

Validated locally with Node.js 22.22.2:

• npm ci --ignore-scripts
• npm run lint:all
• npm audit --audit-level=high: zero vulnerabilities
• git diff --check