…'s undici, and refresh in-range patches (#9819)

* chore(deps): take the Next.js 16.4.5 security release, patch node-gyp's undici, and refresh in-range patches

* fix(multipart): reject a file part without a filename instead of passing undefined through

* fix(deps): exempt Next's platform compiler binaries from the release-age gate so they resolve with 16.4.5

…wnloads (#9824)

Next.js 16.4.5 strips Content-Length and Content-Encoding from every
Route Handler response (GHSA-pc58-hwjq-p385); upstream kept that in
16.4.6 and closed the scoped alternative, so a large download now
arrives chunked without a declared length. The history suite still
proves incremental delivery, the full byte count and the content hash,
and checks a declared length whenever one is present.

…v sync (#9821)

The Trigger.dev env sync copies the app's OUTBOUND_GATEWAYS over the
worker value. The app reaches a gateway through the VPC load balancer;
workers reach it through their own private endpoint, so the copied URL
is unreachable from a run and every gateway-routed request in a
background run fails with GATEWAY_UNAVAILABLE after two connect
timeouts. OUTBOUND_GATEWAYS is now Trigger-owned like REDIS_URL; the
shared credentials and routing source still sync.

…tches into turbo tasks (#9822)

* fix(docs): polish code rendering and keyboard navigation

* fix(docs): give API samples one keyboard entry

…ment, egress gateway addresses kept out of the Trigger env sync, docs code rendering and keyboard navigation, dependency updates