Merge remote-tracking branch 'origin/main' into jg-conductor/3278-fix

* origin/main: (31 commits)
  More precise heading in CHANGELOG (#3402)
  Update `pino` dependency range (#3401)
  Upgrade to latest pnpm v10 (#3400)
  docs: track CI_PNPM_FALLBACK_VERSION bumps in CONTRIBUTING (#3264) (#3346)
  docs(generator): record pnpm fallback bump policy and last-checked date (#3248) (#3328)
  docs: define security-supported versions policy (#3261) (#3341)
  Bump version to 16.7.0.rc.2
  Update CHANGELOG.md for 16.7.0.rc.2 (#3393)
  Fail release on unverifiable or Yarn-incompatible npm packages (#3387)
  Bump version to 16.7.0.rc.1
  [codex] Prepare 16.7.0.rc.1 changelog (#3384)
  fix(tanstack-router): remove Suspense gate around RouterProvider during hydration (#3213)
  chore(deps): bump the npm-security group across 1 directory with 3 updates (#3370)
  fix: add reactDomClientWarning helper for React 16/17 (#3137) (#3358)
  docs: document RSC node renderer globals (#3221)
  fix(pro): preserve react-on-rails-rsc/client.browser in client bundle (#3366) (#3368)
  Allow Pro 16.7 to keep jwt 2.x compatibility (#3344)
  Plan: flagship 2026 React on Rails starter kit (#3357) (#3364)
  docs: clarify coupled gem/npm/lockfile upgrade for React on Rails Pro (#3369)
  chore(deps): bump fastify from 5.8.3 to 5.8.5 in the npm-security group across 1 directory (#3152)
  ...

# Conflicts:
#	CHANGELOG.md

Author: justin808