build(deps): move Next.js to 16.4.5

16.4.5 is a security release with seven moderate advisories. Most are about 'use cache' and Cache Components, which the app does not use; one covers self-hosted apps that forward fetched responses.

package.json

@@ -80,7 +80,7 @@
     "jspdf-autotable": "^5.0.9",
     "lucide-react": "^1.66.0",
     "mmdb-lib": "^3.0.3",
-    "next": "16.4.3",
+    "next": "16.4.5",
     "nodemailer": "10.3.1",
     "otpauth": "^9.5.2",
     "p-limit": "^7.3.3",
@@ -107,7 +107,7 @@
   },
   "devDependencies": {
     "@axe-core/playwright": "^4.14.0",
-    "@next/bundle-analyzer": "16.4.3",
+    "@next/bundle-analyzer": "16.4.5",
     "@playwright/test": "^1.64.1",
     "@stryker-mutator/core": "10.1.1",
     "@stryker-mutator/vitest-runner": "10.0.0",
@@ -125,7 +125,7 @@
     "@vitest/coverage-v8": "^5.0.5",
     "ajv": "^8.20.0",
     "eslint": "^9",
-    "eslint-config-next": "16.4.3",
+    "eslint-config-next": "16.4.5",
     "fast-check": "4.10.2",
     "knip": "^6.44.1",
     "lefthook": "^2.2.2",