Fix Dependabot updates for GitHub scripts

[Copilot]

What is being addressed

Dependabot cannot safely update vulnerable transitive brace-expansion and js-yaml versions pulled in by Jest under .github/scripts.

How is this addressed

• Override the transitive dependencies with patched release lines:

  "overrides": {
    "brace-expansion": "^2.0.2",
    "js-yaml": "^4.1.0"
  }

• Regenerate the lockfile, resolving brace-expansion to 2.x and js-yaml to 4.x.
• Verify the existing .github/scripts tests pass.

[Copilot]

Pull request overview

Adds npm overrides to remediate vulnerable Jest transitive dependencies.

Changes:

• Overrides brace-expansion and js-yaml.
• Regenerates the Jest dependency lockfile.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/scripts/package.json	Defines transitive dependency overrides.
.github/scripts/package-lock.json	Records updated dependency resolutions.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.