refactor: replace glob with tinyglobby

Switched to tinyglobby for a lighter dependency footprint while
maintaining the same glob functionality in the CLI.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: kmelve

.changeset/dark-regions-deny.md

@@ -0,0 +1,5 @@
+---
+"boxfix": patch
+---
+
+replaces deprecated glob package