fix(deps): bump markdownlint-cli from ^0.31.1 to ^0.48.0

[chargome]

Summary

• Bumps markdownlint-cli from ^0.31.1 to ^0.48.0
• Also bumps markdownlint lib from ^0.25.1 to ^0.40.0 to match
• Replaces glob with tinyglobby (no more vulnerable glob dep)
• Uses minimatch@10.2.5 (patched, replaces vulnerable 10.0.3)

Breaking changes in markdownlint-cli 0.31 -> 0.48

• Node.js >=20 required (was >=12) — we use Node 20, not affected
• glob replaced by tinyglobby — internal dep swap, CLI interface unchanged, not affected
• markdownlint lib 0.25 -> 0.40 — internal engine upgrade, switched to markdown-it parser. Some rules renamed/added. We only run markdownlint docs with default config, existing warnings are pre-existing, not affected
• New/updated lint rules — some rules added or tightened across versions. Output now labels findings as "error" instead of bare rule names. Cosmetic only, not affected
• Config format additions (TOML support added) — our config is unchanged, not affected

Dependabot alerts resolved

• Resolves glob command injection (high) — glob removed entirely, replaced by tinyglobby
• Resolves minimatch ReDoS alerts via minimatch@10.2.5: #213, #212, #208, #201
• Partially resolves brace-expansion alerts: #238, #134

🤖 Generated with Claude Code

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 2871200. Configure here.}