[Security][npm] Fix dependency vulnerabilities

- **engine.io** → 6.6.7 (CVE-2026-59725)
- **brace-expansion** → 5.0.7 (CVE-2026-13149)

Refs: SPO-1151

Co-Authored-By: Claude <noreply@anthropic.com>

Author: github-actions[bot]

examples/vite-typescript-example/package-lock.json

@@ -63,7 +63,8 @@
     },
     "ws": "8.21.0",
     "form-data": "4.0.6",
-    "vite": "$vite"
+    "vite": "$vite",
+    "brace-expansion@^5.0.2": "5.0.7"
   },
   "engines": {
     "node": "^20.19.0 || >=22.12.0"

examples/vite-typescript-example/package.json

@@ -56,7 +56,8 @@
     "@babel/plugin-transform-modules-systemjs": "7.29.4",
     "basic-ftp": "5.3.1",
     "tmp": "^0.2.7",
-    "ws": "8.21.0"
+    "ws": "8.21.0",
+    "engine.io": "6.6.7"
   },
   "devDependencies": {
     "@dittolive/ditto": "^5.0.0",