feat: pipeline templates, analytics opt-out, 83 conversion presets, positioning + e2e modernization

Lands five integrated branches: pipeline templates (#355), analytics opt-out (#354), 83 conversion presets bringing the catalog to 240 tools (#356), self-hosted positioning (#353), and e2e modernization (#351).

Integration fixes: aligned stale web analytics tests with the opt-out/allow-list model, closed 3 CodeQL incomplete-sanitization alerts in the i18n generator, resolved settings/index/docs/format-matrix conflicts, and corrected tool counts to 240.

apps/api/src/routes/settings.ts

@@ -144,6 +144,20 @@ export async function settingsRoutes(app: FastifyInstance): Promise<void> {
       });
     }
 
+    if (entries.some((e) => e.key === "analyticsEnabled")) {
+      // The setting is already persisted. A Redis hiccup here must not turn a
+      // successful save into a 500; the TTL refresh converges replicas anyway.
+      try {
+        const { refreshAnalyticsGate, publishAnalyticsGateInvalidation } = await import(
+          "../lib/analytics-gate.js"
+        );
+        await refreshAnalyticsGate(); // this replica, immediately
+        await publishAnalyticsGateInvalidation(); // all other replicas
+      } catch (err) {
+        request.log.warn({ err }, "analytics gate invalidation failed (save still applied)");
+      }
+    }
+
     return reply.send({ ok: true, updatedCount: entries.length });
   });