meta: Allow old Next.js version for dependency review

[mdtro]

Our tests need to support older versions of libraries. In this case there's a vulnerable version of NextJS in the tests that is failing the Dependency Review check.

This adds a configuration file that allows us to specifically exclude the vulnerable finding at least until our minimum supported NextJS version is >= 14.1.1 or GitHub adds support for excluding specific directories from dependency review.