chore: bump brace-expansion in yarn.lock

[katsugtgz]

Updates brace-expansion entries in yarn.lock:

• 1.1.12 -> 1.1.13
• 2.0.2 -> 2.0.3
• 5.0.5 -> 5.0.6

Validation:

• Before: osv-scanner scan --lockfile yarn.lock reported GHSA-f886-m6hf-6m8v / CVE-2026-33750 for brace-expansion 1.1.12 and 2.0.2.
• Before: same scan reported GHSA-jxxr-4gwj-5jf2 / CVE-2026-45149 for brace-expansion 5.0.5.
• After: same scan reports no brace-expansion findings.

Only yarn.lock changed.

[katsugtgz]

@microsoft-github-policy-service agree