chore: merge main, resolve biome formatting conflicts

Merge origin/main into feat/external-2fa-codes. Resolve formatting
conflicts caused by biome rollout; preserve both feature streams:
PR's external 2FA token + signing-session 2FA proof additions plus
main's RateLimit/RecipientExpired/signingReminders/date-auto-insert.

In complete-document-with-token.ts, drop the duplicate early
field-fetching block introduced when main moved that logic later
with date auto-insert support; keep the EXTERNAL_TWO_FACTOR_AUTH
check using derivedRecipientActionAuth.

packages/tsconfig/base.json

@@ -19,12 +19,6 @@
     "strictNullChecks": true,
     "target": "ES2018"
   },
-  "include": [
-    "**/*.ts",
-    "**/*.tsx",
-    "**/.d.ts"
-  ],
-  "exclude": [
-    "node_modules"
-  ]
-}
+  "include": ["**/*.ts", "**/*.tsx", "**/.d.ts"],
+  "exclude": ["node_modules"]
+}

packages/tsconfig/package.json

@@ -11,4 +11,4 @@
     "nextjs.json",
     "react-library.json"
   ]
-}
+}

packages/tsconfig/process-env.d.ts

@@ -74,13 +74,25 @@ declare namespace NodeJS {
     NEXT_PRIVATE_SMTP_FROM_ADDRESS?: string;
 
     NEXT_PUBLIC_DISABLE_SIGNUP?: string;
+    NEXT_PUBLIC_DISABLE_EMAIL_PASSWORD_SIGNUP?: string;
+    NEXT_PUBLIC_DISABLE_GOOGLE_SIGNUP?: string;
+    NEXT_PUBLIC_DISABLE_MICROSOFT_SIGNUP?: string;
+    NEXT_PUBLIC_DISABLE_OIDC_SIGNUP?: string;
+    NEXT_PRIVATE_ALLOWED_SIGNUP_DOMAINS?: string;
 
     NEXT_PRIVATE_BROWSERLESS_URL?: string;
 
-    NEXT_PRIVATE_JOBS_PROVIDER?: 'inngest' | 'local';
+    NEXT_PRIVATE_JOBS_PROVIDER?: 'inngest' | 'local' | 'bullmq';
 
     NEXT_PUBLIC_USE_INTERNAL_URL_BROWSERLESS?: string;
 
+    /**
+     * Redis / BullMQ environment variables
+     */
+    NEXT_PRIVATE_REDIS_URL?: string;
+    NEXT_PRIVATE_REDIS_PREFIX?: string;
+    NEXT_PRIVATE_BULLMQ_CONCURRENCY?: string;
+
     /**
      * Inngest environment variables
      */
@@ -94,6 +106,12 @@ declare namespace NodeJS {
     POSTGRES_PRISMA_URL?: string;
     POSTGRES_URL_NON_POOLING?: string;
 
+    /**
+     * Cloudflare Turnstile environment variables
+     */
+    NEXT_PUBLIC_TURNSTILE_SITE_KEY?: string;
+    NEXT_PRIVATE_TURNSTILE_SECRET_KEY?: string;
+
     /**
      * Google Vertex AI environment variables
      */