fix: resolve security vulnerabilities in transitive dependencies

[iteyelmp]

Updated deep dependencies to address security advisories:

• Forced rollup to >=4.59.0 to fix Arbitrary File Write via Path Traversal.
• Forced picomatch to >=4.0.4 to fix Method Injection in POSIX Character Classes.

Since the parent package tsup is already at the latest version, these were addressed using the overrides field to ensure a secure build environment.