fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728

package.json

@@ -35,9 +35,9 @@
     "nodemailer": "^6.6.1",
     "npm-watch": "^0.11.0",
     "postcss-cli": "^8.3.1",
-    "pug": "^3.0.3",
+    "pug": "^3.0.2",
     "tailwind-hamburgers": "^1.1.1",
-    "tailwindcss": "^3.0.9",
+    "tailwindcss": "^4.0.0",
     "winston": "^3.3.3"
   },
   "devDependencies": {