chore(security): patch current dependency advisories

[GSTJ]

Summary

We patched the current js-yaml, nanoid, and image-size advisories in the development and example dependency tree.

Details

• Pins both js-yaml lines and nanoid to patched releases.
• Patches image-size locally because its repository is archived and no fixed release exists.
• Adds timeout coverage for the ICNS, JXL, and HEIF parser loops.
• Keeps the published library runtime unchanged.

Testing steps

1. Install dependencies:

   corepack pnpm install --frozen-lockfile

2. Run the full test suite:

   corepack pnpm test

   Confirm that the command exits successfully.
3. Export the example app:

   corepack pnpm --filter react-native-magic-toast-example exec expo export --platform ios

   Confirm that Expo writes the iOS bundle without errors.

[GSTJ]

Example app after the dependency patch: