Upgrade Next.js to 16.3.8 (critical RCE advisories) (#223)

Patches GHSA-vcvr-r3jv-pc5j, GHSA-2xp9-vwfh-vxw4 and GHSA-p293-qw3h-jr36.

Next 16.3's build type check now fails on src/lib/pagination.test.ts,
which imports a .ts path; allow .ts import extensions (noEmit is already
on) so the build passes.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

apps/logicsrc-web/package.json

@@ -19,7 +19,7 @@
     "@profullstack/x402-gateway": "^0.7.0",
     "@supabase/supabase-js": "^2.105.4",
     "marked": "^18.0.5",
-    "next": "16.2.6",
+    "next": "16.3.8",
     "react": "19.2.0",
     "react-dom": "19.2.0",
     "sanitize-html": "^2.17.5"

apps/logicsrc-web/tsconfig.json

@@ -10,6 +10,7 @@
     "skipLibCheck": true,
     "strict": true,
     "noEmit": true,
+    "allowImportingTsExtensions": true,
     "esModuleInterop": true,
     "module": "esnext",
     "moduleResolution": "bundler",