[codex] fix minimatch security alerts

[haasonsaas]

Summary

• upgrade @typescript-eslint parser/plugin to the current 8.x line so the dev toolchain resolves patched minimatch ranges
• refresh the npm lockfile and apply mechanical lint cleanup required by the refreshed lint stack
• keep this limited to dependency remediation; no CodeQL or GitHub default code scanning is enabled

Closes #42

Test plan

• npm audit --audit-level=high
• npm run lint
• npm run typecheck
• npm run build
• npm test -- --runInBand --forceExit
• git diff --check

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​typescript-eslint/​parser@​6.21.0 ⏵ 8.59.4	+1		+1
	@​typescript-eslint/​eslint-plugin@​6.21.0 ⏵ 8.59.4	+1		+1

View full report