fix: upgrade npm dependencies to address security vulnerabilities

- grunt 1.1.0 -> 1.6.1 (fixes critical: arbitrary code execution, path traversal)
- grunt-cli 1.2.0 -> 1.5.0 (fixes moderate CVE)
- grunt-contrib-clean 2.0.0 -> 2.0.1
- js-yaml 3.13.1 -> 4.1.1 (fixes prototype pollution, safeLoad -> load)
- Pin all versions for stability (remove ^ ranges)
- Add overrides for transitive deps: minimatch, brace-expansion, ansi-regex
- Reduces vulnerabilities from 22 to 4 (remaining are unfixable lodash in grunt)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: piti6

Gruntfile.js

@@ -17,7 +17,7 @@ const reviewTextMaker = `${reviewPrefix}rake text ${reviewPostfix}`;
 const reviewIDGXMLMaker = `${reviewPrefix}rake idgxml ${reviewPostfix}`;
 const reviewVivliostyle = `${reviewPrefix}rake vivliostyle ${reviewPostfix}`;
 
-const bookConfig = yaml.safeLoad(fs.readFileSync(`${articles}/${reviewConfig}`, "utf8"));
+const bookConfig = yaml.load(fs.readFileSync(`${articles}/${reviewConfig}`, "utf8"));
 
 module.exports = grunt => {
 	grunt.initConfig({