[build] update website dependencies to patched releases

Keep the Vitest 4.1.11 security update and unblock the website audit by updating Next.js and its ESLint plugin to 16.3.4 and Sharp to 0.35.4. Regenerate the production notices and refresh the reviewed Next.js environment-package license pin.

Validation: npm ci; npm run check (282 tests, both builds, zero audit findings); no-leak; SPDX; governance gates.
Signed-off-by: Viwat Vchirawongkwin <viwat.v@chula.ac.th>

Author: yyods