fix(security): pin nanoid to 3.3.18 to resolve dependabot alerts (#13944)