Security: fix vulnerable dependencies and update Node version

[dmirgaev]

1. Fixed node version in engines
2. Updated @types/node dev dependency
3. Overrode brace-expansion sub-dependency version to a safe one
4. Added elliptic sub-dependency to ignoredAdvisories as it hasn't been updating more than 2 years

[Copilot]

Pull request overview

Updates repository tooling and dependency constraints to address known vulnerabilities and standardize the project’s Node.js/tooling baseline.

Changes:

• Pin Node.js version (and align local toolchain files) and bump @types/node accordingly.
• Add brace-expansion override to force a non-vulnerable sub-dependency version.
• Configure the Health Check workflow to ignore a specific advisory (elliptic).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

File	Description
pnpm-lock.yaml	Applies new override and lockfile resolution updates (brace-expansion, @types/node, transitive updates).
package.json	Pins Node engine version, bumps @types/node, adds pnpm.overrides for brace-expansion.
.github/workflows/health-check.yml	Passes ignoredAdvisories config to the reusable repository security check workflow.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.