fix: resolve critical security vulnerability in @isaacs/brace-expansion

- Added pnpm override to force @isaacs/brace-expansion >= 5.0.1
- Fixes CVE for Uncontrolled Resource Consumption in brace-expansion <=5.0.0
- Transitive dependency from @nestjs/cli > glob > minimatch
- Resolves security-audit failure blocking CI pipeline

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

package.json

@@ -53,5 +53,10 @@
   },
   "dependencies": {
     "@opentelemetry/resources": "^1.30.1"
+  },
+  "pnpm": {
+    "overrides": {
+      "@isaacs/brace-expansion": ">=5.0.1"
+    }
   }
 }