fix: update npm dependencies to resolve 6 security vulnerabilities

Fixes: flatted, minimatch, rollup, undici (transitive deps)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: kmcallorum