chore(security): remove temporary minimatch override after upstream dependency remediation

[omarespejel]

Context

A temporary root pnpm.overrides pin was added to force minimatch to a patched version (10.2.2) and unblock CI audit-gate checks (advisory 1113371).

Goal

Remove the temporary override once direct/transitive dependencies have upgraded naturally and CI remains green without forced pinning.

Scope

• Audit current dependency graph for minimatch consumers
• Remove root override from package.json
• Regenerate lockfile
• Verify scripts/security/audit-gate.mjs passes in CI

Acceptance Criteria

1. package.json no longer contains the temporary minimatch override
2. pnpm-lock.yaml resolves only patched minimatch versions via upstream dependency ranges
3. CI Test job passes audit-gate with no allowlist additions

Notes

Do not merge this cleanup until all active PRs that currently depend on the pin are merged or rebased safely.