Replace require() imports with ESM imports in VaultOperations

json-logic-js and glob-to-regexp were imported via require() with
inline type casts, and the eslint config claimed require() was "the
only option" for these CommonJS packages. That was never true: both
were plain ESM default imports until 050155f, esModuleInterop is
enabled, and esbuild bundles CommonJS transparently.

glob-to-regexp now uses its already-installed @types package. For
json-logic-js, the former inline cast moves to a declare-module block
in declarations.d.ts rather than adding @types/json-logic-js, whose
strict RulesLogic input union rejects user-supplied queries and custom
operators while its any-typed apply() return defeats our no-unsafe-*
rules; the unknown-based signatures preserve the safer typing we
already had. The no-require-imports carve-out in the eslint config is
removed along with its incorrect justification. This also resolves two
Obsidian plugin review warnings about require()-style imports.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>