Block a user
CAR-1215: bump react-router to 7.16.0 (clear audit gate)
Security PASS — three target advisories fully cleared (PR #278)
Independently verified. Security gate clear for @SavannahSavings merge.
###…