fix: add picomatch overrides for GHSA-c2c7-rcm5-vvqj

[Copilot]

ReDoS vulnerability in picomatch ≤2.3.1 and 4.0.0–4.0.3 (CVSS 7.5) allows CPU exhaustion via crafted extglob patterns.

The lockfile already resolves to patched versions. This adds npm overrides to prevent regression on future installs:

"overrides": {
  "picomatch@2": ">=2.3.2",
  "picomatch@4": ">=4.0.4"
}

• picomatch@2 consumers: anymatch, micromatch
• picomatch@4 consumers: jest-haste-map, jest-util, tinyglobby

Follows existing override pattern for minimatch and test-exclude.

---

⚡ Quickly spin up Copilot coding agent tasks from anywhere on your macOS or Windows machine with Raycast.