release 0.2.1 with transitive dependency security fixes

[alexmc2]

• release 0.2.1
• pin patched transitive minimatch versions via npm overrides
• refresh the lockfile with fixed minimatch and brace-expansion releases
• update the changelog for the security release

[Copilot]

Pull request overview

Releases version 0.2.1 of the scaffolding CLI, focused on addressing reported transitive dependency security issues by pinning patched minimatch versions and updating release notes accordingly.

Changes:

• Bump package version to 0.2.1 and add npm overrides to pin patched transitive minimatch versions.
• Refresh package-lock.json to pull updated minimatch / brace-expansion artifacts consistent with the overrides.
• Add a 0.2.1 changelog entry describing the security-focused release.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
package.json	Version bump to 0.2.1 and introduces overrides to pin patched transitive minimatch versions.
package-lock.json	Lockfile refresh reflecting updated minimatch and brace-expansion resolutions.
CHANGELOG.md	Adds a 0.2.1 security release entry describing the dependency pinning and lockfile refresh.

[Copilot]

This wording is a bit misleading: npm overrides won’t prevent the ejs -> jake -> filelist -> minimatch dependency path from being resolved; it ensures that the resolved minimatch version on that path is patched. Consider rephrasing to explicitly say the vulnerable version is no longer resolved (or that the path now resolves to the patched version).

Suggested change

	- Pinned patched transitive `minimatch` versions via npm `overrides` so installs no longer resolve the vulnerable `ejs -> jake -> filelist -> minimatch` path.
	- Pinned patched transitive `minimatch` versions via npm `overrides` so the `ejs -> jake -> filelist -> minimatch` path now resolves to a patched `minimatch` release instead of a vulnerable one.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated no new comments.