deps: bump brace-expansion override to >=5.0.6

Resolves GHSA-jxxr-4gwj-5jf2 (moderate ReDoS in brace-expansion 5.0.0–5.0.5)
pulled transitively via tsup › sucrase › glob › minimatch.

Author: ryukzak

bun.lock

@@ -68,7 +68,7 @@
     "minimatch": ">=10.2.3",
     "rollup": ">=4.59.0",
     "smol-toml": ">=1.6.1",
-    "brace-expansion": ">=5.0.5",
+    "brace-expansion": ">=5.0.6",
     "picomatch": ">=4.0.4"
   }
 }