security: upgrade to Next.js 16.1.1 and React 19.2.3 (fixes CVE-2025-55182 React2Shell)

Author: jhf

app/package.json

@@ -55,15 +55,15 @@
     "mermaid": "^11.7.0",
     "moderndash": "^4.0.0",
     "motion": "^12.19.2",
-    "next": "15.2.4",
+    "next": "16.1.1",
     "nuqs": "^2.4.3",
     "pg": "^8.15.1",
     "pg-copy-streams": "^6.0.6",
     "pino": "^9.6.0",
     "pino-seq": "^1.2.0",
-    "react": "19.0.0",
+    "react": "19.2.3",
     "react-day-picker": "^9.7.0",
-    "react-dom": "19.0.0",
+    "react-dom": "19.2.3",
     "react-hook-form": "^7.54.2",
     "set-cookie-parser": "^2.7.1",
     "sharp": "^0.33.5",