Fix 4 High Dependabot alerts (fast-uri, js-yaml, brace-expansion)

[meruyert93]

PR Description

Fixes 4 High Dependabot alerts via new npm overrides (no code changes):

• brace-expansion — RAI-52913 — new override → 1.1.17
• js-yaml — RAI-52834 — new override → 3.15.0
• fast-uri (2 CVEs — host confusion) — RAI-52808, RAI-52807 — new override → 3.1.4

All three are single-instance devDependency/tooling deps (eslint, jest, webpack chains) — no runtime code paths touch them, and each override is a blanket bump since there's no conflicting version requirement elsewhere in the tree.

Verified: npm ci resolves clean, npm audit no longer flags any of the 4 target GHSAs, tscheck/build/lint all pass.

Note: yarn.lock exists in the repo but CI only runs npm ci — left untouched as it appears unused/stale.

Closes RAI-52913, RAI-52834, RAI-52808, RAI-52807

Review Guidelines

Small diff — just package.json (overrides field) + package-lock.json.

Checklist

• My PR is covered by existing test cases, or includes at least basic test cases
• I have removed all dead code, debug statements, and PR-specific TODOs
• I have introduced sufficient documentation to the READMEs, or determined that no documentation is needed.