feat: pipeline templates, analytics opt-out, 83 conversion presets, positioning + e2e modernization

Lands five integrated branches: pipeline templates (#355), analytics opt-out (#354), 83 conversion presets bringing the catalog to 240 tools (#356), self-hosted positioning (#353), and e2e modernization (#351).

Integration fixes: aligned stale web analytics tests with the opt-out/allow-list model, closed 3 CodeQL incomplete-sanitization alerts in the i18n generator, resolved settings/index/docs/format-matrix conflicts, and corrected tool counts to 240.

apps/landing/src/pages/privacy.astro

@@ -86,12 +86,18 @@ const breadcrumbJsonLd = {
           <h2 class="text-lg font-semibold text-foreground">Analytics</h2>
           <ul class="mt-3 list-disc space-y-2 pl-5">
             <li>
-              Basic analytics (tool usage patterns, error reports) help improve the software.
-              Your files and personal data are never included.
+              Anonymous product analytics (tool usage patterns, error reports) help improve the
+              software. Your files, file names, and personal data are never included.
             </li>
             <li>
-              You can disable analytics at any time -- SnapOtter works normally without it.
-              Rebuild with <code class="text-xs">--build-arg SNAPOTTER_ANALYTICS=off</code>.
+              It is on by default. An administrator can turn it off any time with a one-click
+              toggle under Settings &gt; System &gt; Privacy. No rebuild is required, and it stops
+              immediately for the whole instance.
+            </li>
+            <li>
+              To build an image that can never emit analytics, set the
+              <code class="text-xs">SNAPOTTER_ANALYTICS=off</code> build arg as a compile-time
+              hard-off.
             </li>
           </ul>
         </section>