feat: pipeline templates, analytics opt-out, 83 conversion presets, positioning + e2e modernization

Lands five integrated branches: pipeline templates (#355), analytics opt-out (#354), 83 conversion presets bringing the catalog to 240 tools (#356), self-hosted positioning (#353), and e2e modernization (#351).

Integration fixes: aligned stale web analytics tests with the opt-out/allow-list model, closed 3 CodeQL incomplete-sanitization alerts in the i18n generator, resolved settings/index/docs/format-matrix conflicts, and corrected tool counts to 240.

.github/workflows/ci.yml

@@ -162,7 +162,7 @@ jobs:
       - name: Install Playwright Chromium
         run: pnpm playwright install --with-deps chromium
       - name: Run smoke specs
-        # tools-all.spec.ts is the full 157-tool per-tool render matrix (~170 tests)
+        # tools-all.spec.ts is the full 240-tool per-tool render matrix (~250 tests)
         # -- a comprehensive check, not a PR-gate smoke test. It runs in the nightly
         # e2e-full bucket, which executes the whole suite sharded. Keep this gate to
         # genuinely fast sanity specs so it finishes well inside the timeout.

.github/workflows/nightly.yml

@@ -220,7 +220,7 @@ jobs:
       - name: Install Playwright browsers (chromium + webkit)
         run: pnpm playwright install --with-deps chromium webkit
       - name: Run all device projects
-        run: pnpm playwright test --project=mobile-chromium --project=mobile-webkit --project=tablet-webkit --project=tablet-chromium
+        run: pnpm playwright test --project=mobile-chromium --project=mobile-webkit --project=tablet-webkit --project=tablet-chromium --grep-invert "@visual"
         env:
           PW_WORKERS: "2"
       - name: Upload report on failure