democracy hard-codes exactly nanoid@3.3.7 which has CVE-2024-55565

[andyedwardsibm]

The latest version of democracy (4.0.0) hard-codes the version of nanoid to exactly 3.3.7 here. This version is vulnerable to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55565 and is fixed in version 3.3.8

I've created #21 to update the version and change the dependency to allo minor/patch updates