fix(deps): bump nanoid override to 3.3.18 (GHSA-2v37-7h3g-55p8)

[anhnth24]

Summary

• Bump pnpm override nanoid 3.3.17 → 3.3.18 (root package.json + lockfile) để vá advisory high GHSA-2v37-7h3g-55p8 ("custom generators can loop indefinitely when size is zero", patched >=3.3.18; path app > vite > postcss > nanoid).
• Advisory mới publish nên job CI security-deps (pnpm audit --audit-level high) hiện fail trên mọi PR (thấy đầu tiên ở #424) — fix này cần merge trước để mở lại pipeline.

Test plan

• pnpm install — lockfile chỉ đổi nanoid 3.3.17 → 3.3.18 (+2 −3 packages resolve lại)
• pnpm audit --audit-level high → "No known vulnerabilities found" (exit 0)

[cursor]

PR Summary

^{Cursor Bugbot is generating a summary for commit f794ac6. Configure here.}