Merge remote-tracking branch 'origin/main' into codex/wip-pr-3277

* origin/main: (54 commits)
  Bump version to 16.7.0.rc.1
  [codex] Prepare 16.7.0.rc.1 changelog (#3384)
  fix(tanstack-router): remove Suspense gate around RouterProvider during hydration (#3213)
  chore(deps): bump the npm-security group across 1 directory with 3 updates (#3370)
  fix: add reactDomClientWarning helper for React 16/17 (#3137) (#3358)
  docs: document RSC node renderer globals (#3221)
  fix(pro): preserve react-on-rails-rsc/client.browser in client bundle (#3366) (#3368)
  Allow Pro 16.7 to keep jwt 2.x compatibility (#3344)
  Plan: flagship 2026 React on Rails starter kit (#3357) (#3364)
  docs: clarify coupled gem/npm/lockfile upgrade for React on Rails Pro (#3369)
  chore(deps): bump fastify from 5.8.3 to 5.8.5 in the npm-security group across 1 directory (#3152)
  docs: clarify initial security triage ownership in SECURITY.md (#3337)
  docs: consolidate node renderer probe settings (#3257) (#3348)
  chore(ci): remove obsolete setup-node-with-retry action (#3352)
  chore: remove completed planning/analysis docs (#3361)
  test: stub stable VERSION in --pro install spec to unblock CI (#3363)
  docs(specs): add RC testing plan design spec (#3350)
  docs: point users at bin/shakapacker-config --doctor for bundler-config debugging (#3359)
  docs: polish RSC node renderer test recipe (#3273) (#3339)
  test: replace call_count stub pattern with and_return sequence (#2157) (#3353)
  ...

# Conflicts:
#	docs/oss/core-concepts/performance-benchmarks.md

Author: justin808