fix: upgrade Next.js to 16.0.9 (CVE-2025-55182) (#215)

This upgrade fixes CVE-2025-55182, a React Server Components RCE vulnerability.

Co-authored-by: Chris Tate <ctate@users.noreply.github.com>

Author: ctate

package.json

@@ -54,7 +54,7 @@
     "lucide-react": "^0.544.0",
     "ms": "^2.1.3",
     "nanoid": "^5.1.5",
-    "next": "16.0.7",
+    "next": "16.0.9",
     "next-themes": "^0.4.6",
     "postgres": "^3.4.7",
     "react": "19.2.1",