chore: merge main, resolve biome formatting conflicts

Merge origin/main into feat/external-2fa-codes. Resolve formatting
conflicts caused by biome rollout; preserve both feature streams:
PR's external 2FA token + signing-session 2FA proof additions plus
main's RateLimit/RecipientExpired/signingReminders/date-auto-insert.

In complete-document-with-token.ts, drop the duplicate early
field-fetching block introduced when main moved that logic later
with date auto-insert support; keep the EXTERNAL_TWO_FACTOR_AUTH
check using derivedRecipientActionAuth.

packages/lib/utils/render-custom-email-template.ts

@@ -1,7 +1,4 @@
-export const renderCustomEmailTemplate = <T extends Record<string, string>>(
-  template: string,
-  variables: T,
-): string => {
+export const renderCustomEmailTemplate = <T extends Record<string, string>>(template: string, variables: T): string => {
   return template.replace(/\{(\S+)\}/g, (_, key) => {
     if (key in variables) {
       return variables[key];