Fix: use Railway PORT env var for next start

Upgrade Next.js to 14.2.35 to fix CVE-2025-55184 and CVE-2025-67779

MVP2: quickAI — AI Copilot for E-Commerce