[Chore] Update Next.js security fixes

[roomote-roomote]

Created by Roomote. Follow up by mentioning @roomote-roomote or in the web UI.

What changed

• Updated the web application's direct Next.js runtime dependency from 16.2.6 to 16.2.11.
• Refreshed the pnpm resolution, including the matching Next.js runtime binaries and peer dependency references.

Why this change was made

Next.js versions before 16.2.11 are affected by the related Dependabot runtime security alerts #49 through #57. This update adopts the first patched release for that alert bundle.

Impact

The web application resolves Next.js 16.2.11, removing the vulnerable 16.2.6 resolution. The web build, repository linting, and repository type checks pass; the full web test suite has six environment-dependent failures (database/S3 timeouts and configured app URL expectations) that are unrelated to this dependency-only change.

[roomote-roomote]

No code issues found. See task

_{Reviewed 271c941}