fix: update npm dependencies to resolve 4 Dependabot alerts

- flatted 3.3.3 → 3.4.2 (Prototype Pollution via parse())
- minimatch 3.1.2 → 3.1.5, 9.0.5 → 9.0.9 (ReDoS in matchOne())
- rollup 4.54.0 → 4.60.0 (Arbitrary File Write via Path Traversal)
- npm audit: 0 vulnerabilities remaining

Author: johannhartmann