chore(deps-dev): update dev tooling dependencies

[TheRealAgentK]

Summary

• Rolls up low-risk Dependabot dev tooling updates that remained open after the security cleanup:
  • @types/node -> 25.7.0
  • prettier -> 3.8.3
  • tap -> 21.7.2
  • typescript-eslint -> 8.59.3
• Applies lockfile-only audit fixes for remaining root dev-only findings:
  • brace-expansion
  • path-to-regexp
  • yaml
• Leaves the TypeScript 6 major update out for a separate compatibility PR.

Verification

• npm audit
• npm test
• npm run test:cjs
• npm run prepare