(security): run npm audit fix to fix some transitive deps

- `braces` is still giving security warnings, which is a transitive
  dep of @react-native-community/cli and I guess expo
  - the name is a long hash that doesn't show up