feat: pipeline templates, analytics opt-out, 83 conversion presets, positioning + e2e modernization

Lands five integrated branches: pipeline templates (#355), analytics opt-out (#354), 83 conversion presets bringing the catalog to 240 tools (#356), self-hosted positioning (#353), and e2e modernization (#351).

Integration fixes: aligned stale web analytics tests with the opt-out/allow-list model, closed 3 CodeQL incomplete-sanitization alerts in the i18n generator, resolved settings/index/docs/format-matrix conflicts, and corrected tool counts to 240.

apps/api/src/openapi.yaml

@@ -3,7 +3,7 @@ info:
   title: SnapOtter API
   version: 1.17.1
   description: |
-    REST API for SnapOtter, a self-hosted file processing suite with 157 tools across image, video, audio, document, and data.
+    REST API for SnapOtter, a self-hosted file processing suite with 240 tools across image, video, audio, document, and data.
 
     ## Authentication
 
@@ -5429,15 +5429,6 @@ paths:
                           type: string
                       teamName:
                         type: string
-                      analyticsEnabled:
-                        type: boolean
-                        nullable: true
-                      analyticsConsentShownAt:
-                        type: integer
-                        nullable: true
-                      analyticsConsentRemindAt:
-                        type: integer
-                        nullable: true
                   expiresAt:
                     type: string
                     format: date-time
@@ -5509,15 +5500,6 @@ paths:
                         type: array
                         items:
                           type: string
-                      analyticsEnabled:
-                        type: boolean
-                        nullable: true
-                      analyticsConsentShownAt:
-                        type: integer
-                        nullable: true
-                      analyticsConsentRemindAt:
-                        type: integer
-                        nullable: true
                   expiresAt:
                     type: string
                     format: date-time
@@ -6416,8 +6398,10 @@ paths:
       tags: [Analytics]
       summary: Get analytics configuration
       description: |
-        Returns analytics provider configuration. When ANALYTICS_ENABLED is
-        false on the server, all values are empty. Public endpoint.
+        Returns the effective analytics provider configuration. Analytics is
+        enabled only when both the compile-time bake and the instance
+        analyticsEnabled setting allow it. When disabled, the keys, DSN, and
+        instanceId are blank. Public endpoint.
       security: []
       responses:
         "200":
@@ -6429,6 +6413,11 @@ paths:
                 properties:
                   enabled:
                     type: boolean
+                    description: |
+                      Effective analytics state. True only when both the
+                      compile-time bake and the instance analyticsEnabled
+                      setting are on. When false, the keys, DSN, and instanceId
+                      are blank.
                   posthogApiKey:
                     type: string
                   posthogHost: