Fix npm audit vulnerabilities

[numbers-official]

Summary

This PR refreshes package-lock.json to resolve the current npm audit vulnerabilities without changing direct dependency ranges in package.json.

Changes

• Update vulnerable transitive dev dependency lockfile entries for brace-expansion, path-to-regexp, and smol-toml.
• Keep the fix scoped to package-lock.json; no direct package dependency ranges were changed.

Verification

• npm audit --audit-level=moderate
• npm run lint
• npm run build
• npm run build:test
• npx playwright install
• npm run test

---

Generated by Olga Shen with Omni