fix: resolve dependabot alerts for fast-uri and postcss

[kml-rohillaa]

Summary

• Added resolution fast-uri: >=3.1.2 to patch host confusion via percent-encoded authority delimiters (alert fix: add material package to peer dependency to resolve version conflicts #44, high) and path traversal via percent-encoded dot segments (alert build(deps-dev): bump vite from 6.3.5 to 6.3.6 #43, high). Pulled in transitively via ajv.
• Added resolution postcss: >=8.5.10 to patch XSS via unescaped </style> in CSS stringify output (alert Handle long modal title #42, medium). Pulled in transitively via vite.

Resolved to fast-uri@3.1.2 and postcss@8.5.14.

Test plan

• yarn install regenerates lockfile cleanly
• yarn build succeeds
• Confirm Dependabot closes alerts Handle long modal title #42, build(deps-dev): bump vite from 6.3.5 to 6.3.6 #43, fix: add material package to peer dependency to resolve version conflicts #44 after merge

🤖 Generated with Claude Code