fix: upgrade js-yaml to 3.14.2 to address CVE-2025-64718 (#105)

Added package override to ensure js-yaml version 3.14.2+ is used,
addressing a moderate severity security vulnerability in the transitive
dependency. Also fixed brace-expansion vulnerability via npm audit fix.

Co-authored-by: Claude <noreply@anthropic.com>

Author: jeffabailey

scripts/gqm_gen/package-lock.json

@@ -20,5 +20,8 @@
         "nyc": "^15.1.0",
         "tsx": "^4.19.3",
         "typescript": "^5.2.2"
+    },
+    "overrides": {
+        "js-yaml": "^3.14.2"
     }
 }