build(deps): resolve glob 13 to 14.0.2 (#20)

glob 13.0.0 (GHSA-3g3m-2fjr-6pw4, fixed in 14.0.2) reaches the lockfile only
through node-gyp -> make-fetch-happen -> cacache, which yarn adds for the
optional macOS fsevents build. cacache calls glob(pattern, options) with
'*(content-*|index-*)' and '**' patterns; glob 14.0.2 returns the same paths
for both.

glob 14.0.2 needs minimatch ^11 and @isaacs/nonrecursive-glob-match ^1.0.1;
pin them to 11.0.1 and 1.0.1, the releases at least 14 days old. The
minimatch 10.2.6 used by eslint stays: eslint-plugin-import-x 4.17.1 imports
makeRe, which minimatch 11 removed, so forcing it fails every lint run.

package.json

@@ -50,7 +50,10 @@
     "fflate": "^0.8.3"
   },
   "resolutions": {
+    "@isaacs/nonrecursive-glob-match@npm:^1.0.1": "1.0.1",
     "braces": "npm:@pezkuwi/braces@^3.0.4",
+    "glob@npm:^13.0.0": "14.0.2",
+    "minimatch@npm:^11.0.0": "11.0.1",
     "typescript": "^5.5.4"
   }
 }