fix: resolve all dependabot security alerts

- Bump next peerDependency floor from ^15.5.7 to ^15.5.14 to cover all
  open next.js advisories (GHSA-9qr9-h5gf-34mp through GHSA-3x4c-7xq6-9pq8)
- Run npm audit fix to update transitive devDependencies: rollup, glob,
  minimatch, picomatch, brace-expansion

Author: dcbouius