Bump postcss, css-loader and vue-loader in /web

Bumps [postcss](https://github.com/postcss/postcss) to 8.4.38 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [css-loader](https://github.com/webpack-contrib/css-loader) and [vue-loader](https://github.com/vuejs/vue-loader). These dependencies need to be updated together.


Updates `postcss` from 7.0.39 to 8.4.38
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.39...8.4.38)

Updates `css-loader` from 0.28.11 to 7.1.1
- [Release notes](https://github.com/webpack-contrib/css-loader/releases)
- [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/css-loader@v0.28.11...v7.1.1)

Updates `vue-loader` from 15.11.1 to 17.4.2
- [Release notes](https://github.com/vuejs/vue-loader/releases)
- [Changelog](https://github.com/vuejs/vue-loader/blob/main/CHANGELOG.md)
- [Commits](vuejs/vue-loader@v15.11.1...v17.4.2)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
- dependency-name: css-loader
  dependency-type: direct:development
- dependency-name: vue-loader
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>