chore: merge main, resolve biome formatting conflicts

Merge origin/main into feat/external-2fa-codes. Resolve formatting
conflicts caused by biome rollout; preserve both feature streams:
PR's external 2FA token + signing-session 2FA proof additions plus
main's RateLimit/RecipientExpired/signingReminders/date-auto-insert.

In complete-document-with-token.ts, drop the duplicate early
field-fetching block introduced when main moved that logic later
with date auto-insert support; keep the EXTERNAL_TWO_FACTOR_AUTH
check using derivedRecipientActionAuth.

packages/lib/utils/images/avatar.ts

@@ -1,10 +1,7 @@
 import sharp from 'sharp';
 
 export const optimiseAvatar = async (bytes: string) => {
-  return await sharp(Buffer.from(bytes, 'base64'))
-    .resize(512, 512)
-    .toFormat('jpeg', { quality: 75 })
-    .toBuffer();
+  return await sharp(Buffer.from(bytes, 'base64')).resize(512, 512).toFormat('jpeg', { quality: 75 }).toBuffer();
 };
 
 export const loadAvatar = async (bytes: string) => {

packages/lib/utils/images/resize-image-to-gemini-image.ts

@@ -11,9 +11,6 @@ type ResizeImageToGeminiImageOptions = {
  * Resize image to 1000x1000 using fill strategy.
  * Scales to cover the target area and crops any overflow.
  */
-export const resizeImageToGeminiImage = async ({
-  image,
-  size = TARGET_SIZE,
-}: ResizeImageToGeminiImageOptions) => {
+export const resizeImageToGeminiImage = async ({ image, size = TARGET_SIZE }: ResizeImageToGeminiImageOptions) => {
   return await sharp(image).resize(size, size, { fit: 'fill' }).toBuffer();
 };