Update Next.js and Supabase packages to fix vulnerabilities

- next 16.1.6 → 16.2.4 (fixes 6 high-severity CVEs: HTTP request smuggling,
  cache DoS, CSRF bypass, Server Components DoS)
- @supabase/ssr 0.10.0 → 0.10.2
- @supabase/supabase-js 2.101.0 → 2.103.3

npm audit now reports 0 vulnerabilities.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: kutcode

frontend/package-lock.json

@@ -8,9 +8,9 @@
     "start": "next start"
   },
   "dependencies": {
-    "@supabase/ssr": "^0.10.0",
-    "@supabase/supabase-js": "^2.101.0",
-    "next": "16.1.6",
+    "@supabase/ssr": "^0.10.2",
+    "@supabase/supabase-js": "^2.103.3",
+    "next": "^16.2.4",
     "react": "19.2.3",
     "react-dom": "19.2.3"
   }