chore: remediate Dependabot alert 42

[nahremenkova1]

Summary

• Refresh package-lock.json from the current default branch to resolve Dependabot alert #42 for js-yaml (<4.3.1).
• Keep package.json unchanged; master already has multer ^2.2.0.
• Include current lockfile-only audit fixes for brace-expansion, nanoid, postcss, and next within existing package ranges.

Verification

• npm ci
• npm audit
• npm run typecheck
• npm run lint
• npm test

Notes

• No npm release was performed.
• The unrelated dirty files in the inherited workspace were left untouched.