brace-expansion compatibility adapter
Older minimatch releases call require('brace-expansion') as a function,
while the security-fixed 5.x package exposes a named expand function.
This adapter preserves the legacy callable CommonJS API and delegates all
expansion work to the bounded brace-expansion@5.0.8 implementation.