Bump the npm_and_yarn group across 1 directory with 4 updates

Bumps the npm_and_yarn group with 3 updates in the /app/next-client-app directory: @isaacs/brace-expansion, [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [tar](https://github.com/isaacs/node-tar).


Updates `@isaacs/brace-expansion` from 5.0.0 to 5.0.1

Updates `@modelcontextprotocol/sdk` from 1.25.2 to 1.26.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@v1.25.2...v1.26.0)

Updates `qs` from 6.14.1 to 6.14.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.1...v6.14.2)

Updates `tar` from 7.5.6 to 7.5.7
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.6...v7.5.7)

---
updated-dependencies:
- dependency-name: "@isaacs/brace-expansion"
  dependency-version: 5.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.26.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 7.5.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

app/next-client-app/package-lock.json

@@ -34,7 +34,7 @@
     "framer-motion": "^11.11.8",
     "lucide": "^0.414.0",
     "lucide-react": "^0.510.0",
-    "next": "^15.5.10",
+    "next": "^15.5.11",
     "next-auth": "^4.24.12",
     "next-runtime-env": "^3.3.0",
     "next-themes": "^0.4.6",