main/nodejs: security upgrade to 18.18.2

https://nodejs.org/en/blog/release/v18.18.2

Left out CVE-2023-44487 as main/nodejs is compiled with --shared-nghttp2, and that CVE was fixed in !53132 (merged)