fix(ci): include node types under TS6 + bump brace-expansion

TypeScript 6 with module: Node16 and @types/node@25 no longer auto-includes
node type definitions. `import { readFileSync } from "node:fs"` failed across
the codebase with TS2591 "Cannot find name 'node:fs'", breaking CI on every
push since 2026-04-25.

Adding `"types": ["node"]` to tsconfig.json compilerOptions explicitly tells
TS to include @types/node. Minimal, surgical change — no other @types/*
devDependencies exist, so this doesn't exclude anything.

Also picks up `npm audit fix` for brace-expansion (transitive, moderate
severity GHSA-f886-m6hf-6m8v / GHSA-jxxr-4gwj-5jf2) so the audit gate
passes once the build step is unblocked.

Local verification (Node 22):
- npm run build: clean
- npm test: 93/93 pass
- npm audit --audit-level=moderate: 0 vulnerabilities
- npm pack --dry-run: 57 files, 823.5 kB

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: mcp-tool-shop

package-lock.json

@@ -10,7 +10,8 @@
     "skipLibCheck": true,
     "forceConsistentCasingInFileNames": true,
     "declaration": true,
-    "sourceMap": false
+    "sourceMap": false,
+    "types": ["node"]
   },
   "include": ["src/**/*.ts"],
   "exclude": ["node_modules", "dist"]