fix: patch dependency advisories on the current release

Keep Next on the patched 15.5 line instead of the Next 16 Dependabot bump, and move OpenTelemetry and gRPC to the versions that close the open Go alerts.

frontend/package.json

@@ -27,7 +27,7 @@
     "emoji-datasource-apple": "^15.1.2",
     "framer-motion": "^12.0.0",
     "lucide-react": "^0.468.0",
-    "next": "^15.1.0",
+    "next": "15.5.27",
     "next-themes": "^0.4.4",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
@@ -44,5 +44,10 @@
     "@types/react-dom": "^19.0.0",
     "tailwindcss": "^4.0.0",
     "typescript": "^5.7.0"
+  },
+  "overrides": {
+    "postcss": "8.5.28",
+    "sharp": "0.35.5",
+    "source-map-js": "1.2.2"
   }
 }