fix(security): update Next.js to 14.2.35 and fix 14 vulnerabilities

Reviewed incident dove-zebra regarding critical React2Shell RCE
vulnerabilities (CVE-2025-55182, CVE-2025-66478).

This repository was NOT affected by the critical RCE (CVSS 10.0)
because:
- Next.js 14.x stable is explicitly not affected per official advisory
- React 18.x does not include vulnerable RSC packages (React 19 only)

However, pnpm audit identified 14 other vulnerabilities that needed
remediation.

- next: 14.0.4 → 14.2.35 (fixes 13 CVEs)
- eslint-config-next: 14.0.0 → 14.2.35
- eslint: 8.52.0 → 8.57.1 (peer dependency requirement)
- lint-staged: 15.0.2 → 15.5.2 (fixes micromatch ReDoS)
- Added pnpm override for glob@>=10.5.0 (transitive vulnerability)

- TypeScript compilation: ✅ passed
- Next.js build compilation: ✅ passed
- pnpm audit: 0 vulnerabilities

Advisory:
- https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
- https://nextjs.org/blog/CVE-2025-66478
Incident:
- https://app.incident.io/lightspeedhq/incidents/3042
- https://docs.google.com/spreadsheets/d/1Ac7vCVjknlTXZWK01G3poQrXrZX78uVrYE2P2Yk5y_o/edit?usp=sharing

Author: sombreroEnPuntas

package.json

@@ -1,6 +1,11 @@
 {
   "private": true,
   "packageManager": "pnpm@8.2.0",
+  "pnpm": {
+    "overrides": {
+      "glob@>=10.2.0 <10.5.0": "^10.5.0"
+    }
+  },
   "engines": {
     "node": ">=18",
     "pnpm": ">=7"
@@ -26,7 +31,7 @@
     "@heroicons/react": "^2.0.18",
     "clsx": "^2.0.0",
     "geist": "^1.0.0",
-    "next": "14.0.4",
+    "next": "14.2.35",
     "react": "18.2.0",
     "react-dom": "18.2.0"
   },
@@ -38,11 +43,11 @@
     "@types/react-dom": "18.2.14",
     "@vercel/git-hooks": "^1.0.0",
     "autoprefixer": "^10.4.16",
-    "eslint": "^8.52.0",
-    "eslint-config-next": "^14.0.0",
+    "eslint": "^8.57.1",
+    "eslint-config-next": "^14.2.35",
     "eslint-config-prettier": "^9.0.0",
     "eslint-plugin-unicorn": "^48.0.1",
-    "lint-staged": "^15.0.2",
+    "lint-staged": "^15.5.2",
     "postcss": "^8.4.31",
     "prettier": "3.0.3",
     "prettier-plugin-tailwindcss": "^0.5.6",