Resolve 2 high-severity npm audit vulnerabilities in dependencies

[rafaelvieiras]

Problem

A real gate run reports 2 high-severity vulnerabilities in the current dependency tree (non-blocking warning, since audit_high is non-blocking, but baseline was 0).

Reproduction

npm audit

Suggested fix

Run npm audit fix (or update the offending transitive deps); if intentional/unavoidable, re-baseline audit_high with a documented justification.

Acceptance

• npm audit reports 0 high (or the baseline is updated with rationale).