fix(deps): patch postcss and webpack-dev-server vulnerabilities (#30)

- Bump postcss override to >=8.5.18 to fix arbitrary file read via
  path traversal in sourceMappingURL handling (GHSA-6g55-p6wh-862q,
  GHSA-r28c-9q8g-f849).
- Bump webpack-dev-server override to >=5.2.6 to fix DoS via malformed
  Host/Origin headers crashing the dev server (GHSA-m28w-2pqf-7qgj).
  The prior >=5.2.5 override was pinning to the last vulnerable version.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: Dariia

package-lock.json

@@ -28,9 +28,9 @@
     "buble": "^0.20.0"
   },
   "overrides": {
-    "webpack-dev-server": ">=5.2.5",
+    "webpack-dev-server": ">=5.2.6",
     "http-proxy-middleware": "^2.0.10",
-    "postcss": ">=8.4.31",
+    "postcss": ">=8.5.18",
     "lodash": "^4.18.1",
     "follow-redirects": "^1.16.0",
     "vue-template-compiler": "npm:vue-template-compiler-patched@^2.7.16-patch.2",