chore: bump next to 16.3.3 / 15.5.24 across the Next.js examples

[yosriady]

Summary

Fixes the Aikido "Next.js" alert (AIKIDO-2026-553733 / GHSA-2xp9-vwfh-vxw4, Critical: heap buffer overflow in AVIF image optimization via sharp/libheif) in all 12 Next.js examples.

Changes

• 16.x examples (with-crossmint, with-privy, with-reown, with-thirdweb, with-web3-onboard): ^16.3.1 -> ^16.3.3. with-tempo and with-porto pin latest, so only their lockfiles move.
• 15.x examples (with-metamask, with-next-page-router, with-solana, with-turnkey, with-next-app-router): ^15.5.22 / ~15.5.22 -> 15.5.24, including the next overrides in with-turnkey and with-next-app-router.
• Add scoped minimumReleaseAgeExclude entries for the patched next plus its @next/env and @next/swc-* platform packages in every example. They were published 2026-08-25, inside the 7-day gate. Remove after 2026-09-01.
• Lockfile churn is next, browserslist data packages, and one in-range find-my-way bump under fastify in with-thirdweb.

Verification

CI-style next build (placeholder .env from .env.example) passes with exit 0 in all 11 buildable examples. with-crossmint is skipped in CI because its SDK validates the API key at build time.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NkpRCGtPSehjexGGs66jM5

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[socket-security]

Dependency limit exceeded — report not shown.

This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report.

Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard.

Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account.