chore(security): bump nodemailer 7 -> 8 for CRLF injection CVE

Author: nicktrn

internal-packages/emails/package.json

@@ -13,15 +13,15 @@
     "@aws-sdk/client-sesv2": "^3.716.0",
     "@react-email/components": "0.0.16",
     "@react-email/render": "^0.0.12",
-    "nodemailer": "^7.0.11",
+    "nodemailer": "^8.0.6",
     "react": "^18.2.0",
     "react-email": "^2.1.1",
     "resend": "^3.2.0",
     "tiny-invariant": "^1.2.0",
     "zod": "3.25.76"
   },
   "devDependencies": {
-    "@types/nodemailer": "^7.0.4",
+    "@types/nodemailer": "^8.0.0",
     "@types/react": "18.2.69"
   },
   "engines": {