fix: resolve all npm audit vulnerabilities

Upgrade next 16.1.2 → 16.1.6 (3 high-severity CVEs: DoS via Image
Optimizer, PPR memory consumption, RSC deserialization). Upgrade
vitest ^1 → ^3 and add vite ^7 to resolve esbuild <=0.24.2 dev
server vulnerability chain. Add root-level next override to ensure
inngest transitive dependency uses patched version.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: devakone

apps/web/package.json

@@ -25,7 +25,7 @@
     "cmdk": "^1.1.1",
     "inngest": "^3.49.3",
     "lucide-react": "^0.562.0",
-    "next": "16.1.2",
+    "next": "16.1.6",
     "qrcode": "^1.5.4",
     "react": "19.2.3",
     "react-dom": "19.2.3",
@@ -39,10 +39,11 @@
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "eslint": "^9",
-    "eslint-config-next": "16.1.2",
+    "eslint-config-next": "16.1.6",
     "tailwindcss": "^4",
     "tw-animate-css": "^1.4.0",
     "typescript": "^5",
-    "vitest": "^1"
+    "vite": "^7",
+    "vitest": "^3"
   }
 }