Upgrade all packages to latest major versions; fix two pre-existing bugs
Frontend:
- next 15 → 16.2.6, react 19.0 → 19.2.6, eslint-config-next updated to match
- Add missing axios dependency (was implicit, broke build)
- Fix VideoPlayer.tsx broken absolute import path (pre-existing bug)
- Fix uploads route handler params to async (Next.js 16 breaking change)
- Remove deprecated images.domains → remotePatterns in next.config.js
- Remove experimental.serverActions (promoted to stable, then removed in v16)
- Update lint script: next lint removed in v16, now uses eslint directly
Backend:
- express 4 → 5.2.1, mongoose 8 → 9.6.2
- bcrypt 5 → 6, helmet 7 → 8, zod 3 → 4