[Dependabot] react-native-onyx - Bump minimatch to 3.1.5 and 9.0.9 #105167

Problem

react-native-onyx has open Dependabot alerts for minimatch (GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26). These are ReDoS fixes.

Solution

Bump minimatch in the react-native-onyx lockfile:

• 3.1.2 → 3.1.5
• 9.0.5 → 9.0.9

This is a dev-only transitive dependency (ESLint, Jest, react-native tooling). It is not shipped in the published package, so the App does not need an Onyx bump for this change.

PR: Bump minimatch to 3.1.5 and 9.0.9