fix(web-extension): bump react-router-dom and nanoid

[chargome]

Summary

• Bumps react-router-dom from ^6.4.1 to ^6.30.2 in packages/web-extension
• Bumps nanoid from ^4.0.0 to ^5.0.9 in packages/web-extension

Breaking changes in nanoid v5

• Node.js >=18 required — we use Node 20, not affected
• Removed async API (Web Crypto is sync-only now) — we only use sync nanoid(), not affected
• Named export required (import { nanoid }) — we already use named import, not affected
• Removed CommonJS support — web-extension is ESM ("type": "module"), not affected

Breaking changes in react-router-dom 6.4 -> 6.30

• No breaking changes within the 6.x line. All APIs we use (Routes, Route, useParams, useNavigate, createHashRouter, RouterProvider) are stable

Dependabot alerts resolved

• Alert #168 (medium) — react-router unvalidated redirect
• Alert #167 (high) — @remix-run/router XSS via open redirects
• Alert #105 (medium) — nanoid predictable generation
• Alert #104 (medium) — nanoid predictable generation

🤖 Generated with Claude Code