build(deps): resolve typescript-estree's minimatch to 11.0.1 (#68)

minimatch 9.0.9 (GHSA-g3hv-75wg-m249, fixed in 11.0.1) is a dev dependency of
@typescript-eslint/typescript-estree and of nothing else. It calls only
minimatch(filePath, pattern, { dot: true }) for allowDefaultProject; minimatch
11 keeps that function and drops makeRe, the regexp property, AST and debug.
An override keeps the release on the next install.

11.0.1 and @isaacs/nonrecursive-glob-match 1.0.1 are the newest releases at
least 14 days old.

web/package.json

@@ -119,6 +119,9 @@
     "elliptic": "^6.6.1",
     "@tailwindcss/typography": {
       "postcss-selector-parser": "6.1.5"
+    },
+    "@typescript-eslint/typescript-estree": {
+      "minimatch": "11.0.1"
     }
   },
   "devDependencies": {