fix(deps): raise nanoid override floor to 3.3.18 (GHSA-2v37-7h3g-55p8, High)

This branch already pinned undici>=7.29.0 and js-yaml>=4.3.1 to clear two High
advisories. A third has landed since: GHSA-2v37-7h3g-55p8 (CVSS 8.2, High)
affects nanoid < 3.3.18, and this lockfile resolved nanoid to 3.3.17.

The osv gate on this PR last ran 2026-08-12, before that advisory published, so
its green is stale — merging as-is would land a High on main and re-red the
dependency gate for every open PR (issue #145).

Verified against api.osv.dev:
  nanoid@3.3.17 -> 1 advisory, GHSA-2v37-7h3g-55p8 (HIGH)
  nanoid@3.3.18 -> 0 advisories

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: liveapp-bot

package.json

@@ -37,6 +37,7 @@
       "vite": ">=6.4.3",
       "read-yaml-file@1": "^2.1.0",
       "js-yaml@4": "^4.3.1",
+      "nanoid@3": "^3.3.18",
       "esbuild": ">=0.28.1",
       "sharp": ">=0.35.0"
     }