drop the nanoid age-gate exclude once its release matures

[zgeoff]

trigger: date 2026-08-10

bunfig.toml excludes nanoid from the 7-day minimumReleaseAge gate so the tree could adopt the
advisory-patched release (nanoid 3.3.17, patching GHSA-2v37-7h3g-55p8 — the zero-size infinite loop)
before it aged in. Published 2026-08-03, it ages past the gate ~2026-08-10.

When the trigger fires:

• delete the nanoid entry and its comment line from minimumReleaseAgeExcludes in bunfig.toml
• run bun install and confirm bun run audit still passes

[github-actions]

Trigger fired: the recorded date 2026-08-10 has passed. This upkeep is actionable now.