Update picomatch (#29525)
The playground's locked `picomatch` 2.3.1 has a security advisory.
Update it to 2.3.2, which is outside the affected range. Updating
`picomatch` also refreshes the other locked version from 4.0.4 to 4.0.7.
Codex's analysis is that Renovate's missing [support for targeted
updates of transitive dependencies in
`package-lock.json`](https://github.com/renovatebot/renovate/issues/46379)
may explain why it did not open a security update for the vulnerable
`picomatch` version.
Split from #29518.
