chore: update dev dependencies

[corwinm]

Summary

• update stale dev tooling dependencies, including TypeScript, ESLint, VSCE, OVSX, Semantic Release plugins, Sinon, and type packages
• refresh pnpm-lock.yaml
• add explicit Node/Mocha ambient types for the newer TypeScript/type package behavior
• add targeted brace-expansion overrides for remaining transitive audit findings

Validation

• pnpm outdated
• pnpm audit
• pnpm run check-types
• pnpm run lint
• pnpm run verify:release
• pnpm test
• pnpm run package
• git diff --check