fix(deps): patch nanoid and postcss for remaining Dependabot CVEs (#3191)