Fix remaining Chatrix dependency alerts

[lancewillett]

Summary

• Updates the remaining vulnerable transitive dependency versions after Update Chatrix security dependencies #276: minimatch, picomatch, postcss, and ws.
• Keeps picomatch 4.x consumers on 4.0.4 while moving the vulnerable 2.3.1 lock entries to 2.3.2.
• Targets the five remaining open alerts on main: CI #24, Release v0.2.2 #106, Logout user from matrix when they logout in WordPress #118, Update hydrogen to latest version #142, and Don't wait for load event to render chatrix onto the page #161.

Testing

• yarn install --frozen-lockfile
• yarn list --pattern '(picomatch|minimatch|postcss|ws)' --depth=2\n- yarn why picomatch\n- yarn why minimatch && yarn why postcss && yarn why ws\n- yarn lint\n- yarn build\n- php -d error_reporting='E_ALL & ~E_DEPRECATED' ./vendor/bin/phpcs\n- git diff --check