Fix Snyk vulnerabilities and validate via build/tests

.snyk

@@ -0,0 +1,19 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.1
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-JS-BABELTRAVERSE-5962463:
+    - '*':
+        reason: >-
+          babel-traverse is a dev-only build tool dependency, not deployed to
+          production
+        expires: 2025-07-31T18:40:27.537Z
+        created: 2025-07-01T18:40:27.540Z
+  SNYK-JS-ISTANBULREPORTS-2328088:
+    - '*':
+        reason: >-
+          istanbul-reports is a dev-only code coverage tool, not deployed to
+          production
+        expires: 2025-07-31T18:40:29.496Z
+        created: 2025-07-01T18:40:29.500Z
+patch: {}