fix(deps): upgrade next.js and @next/third-parties to 14.2.35 for sec…

[nikaaru]

🔒 Critical Security Upgrade: Next.js 14.2.35

This PR updates the next and @next/third-parties packages to version 14.2.35 to address recent critical security vulnerabilities in the App Router/React Server Components protocol.

The target version 14.2.35 is the officially patched release for our current Next.js 14 line, as recommended by the Next.js Security Advisory (2025-12-11).

Affected Dependencies:

Package	From	To
next	^14.2.11	^14.2.35
@next/third-parties	^14.2.15	^14.2.35

Key Vulnerabilities Addressed:

1. High-Severity Denial of Service (DoS): Prevents an attacker from hanging the server process via a maliciously crafted HTTP request targeting App Router endpoints (CVE-2025-67779).
2. Medium-Severity Source Code Exposure: Fixes a bug where a Server Function could return its compiled source code, potentially revealing business logic or inlined secrets (CVE-2025-55183).

Required Testing:

• Confirm all App Router routes and pages load correctly.
• Verify all Server Component functions execute as expected.
• Check all third-party integrations (via @next/third-parties) are working correctly.
• Perform standard smoke tests across the application.