fix: upgrade Next.js to 16.0.7 (CVE-2025-55182) (#152)

This upgrade fixes CVE-2025-55182, a React Server Components RCE vulnerability.

Co-authored-by: Chris Tate <ctate@users.noreply.github.com>

Author: ctate

lib/next-boilerplate/package.json

@@ -9,7 +9,7 @@
     "lint": "eslint"
   },
   "dependencies": {
-    "next": "16.0.3",
+    "next": "16.0.7",
     "react": "19.2.0",
     "react-dom": "19.2.0"
   },