fix(deps): resolve dependency security alerts

[wax911]

Description

Resolves the 13 currently open Dependabot alerts without forcing incompatible major upgrades.

• Pins axios to 1.18.1, incorporating Ref: chore(deps): bump axios from 1.16.0 to 1.18.1 in the npm_and_yarn group across 1 directory #228.
• Pins @opentelemetry/propagator-jaeger to 2.10.0.
• Updates the vulnerable glob/minimatch brace-expansion 2.x subtree to 2.1.4 while preserving the ESLint 5.x subtree.
• Documents why TypeScript 7 Ref: chore(deps): update dependency typescript to v7 #214 and js-yaml 5 Ref: chore(deps): update dependency js-yaml to v5 #190 remain deferred pending upstream compatibility.

Validation

• npm audit: 0 vulnerabilities
• npm audit --omit=dev: 0 vulnerabilities
• npm run typecheck: passed
• npm test: 13/13 passed
• npm run build: passed, generated supergraph unchanged
• Gateway health and readiness smoke: HTTP 200

The local lint failure is limited to pre-existing generated .gitnexus/run.cjs tooling output and is absent from tracked source files.