Clear production dependency audit

[adamXbot]

Summary

Clear the current production dependency audit and incorporate the older Nodemailer update from #91 without downgrading patched dependencies.

• Raise the Next.js, Nodemailer, and Undici dependency floors to 16.3.6, 10.0.6, and 8.10.2 respectively.
• Refresh the lockfile to Next.js 16.3.7, Nodemailer 10.0.12, and Undici 8.11.2.
• Update the Joi and Undici 7 overrides for current advisories while retaining the separate Undici 8 application dependency.
• Preserve build(deps): bump nodemailer from 9.0.3 to 9.1.1 in the npm_and_yarn group across 1 directory #91's commit history in this branch so a merge commit incorporates that outstanding update too.

Verification

• Fresh pnpm audit --prod --json: zero advisories at every severity.
• Server, CLI, and edge TypeScript checks passed; IoT helper syntax check passed.
• Server, CLI, and edge unit suites: 512 tests passed.
• Next.js production build passed.
• Actual Nodemailer JSON transport composition smoke passed for multiple recipients, text, and HTML.
• Database integration and standalone HTTP checks run in CI; PostgreSQL is unavailable locally.

Merge order

Merge this PR with a merge commit to retain the incorporated #91 history. Then update #93 from main and rerun its checks against the patched dependencies.