fix(sec): upgrade next.js to avoid dos cve (https://nextjs.org/blog/security-update-2025-12-11)

Author: sneko

package-lock.json

@@ -136,7 +136,7 @@
     "mistral-tokenizer-js": "^1.0.0",
     "msw": "^1.3.2",
     "natural": "^6.12.0",
-    "next": "14.2.25",
+    "next": "14.2.35",
     "next-i18next": "^13.0.3",
     "next-superjson-plugin": "0.6.3",
     "openai": "^4.25.0",