chore: merge main, resolve biome formatting conflicts

Merge origin/main into feat/external-2fa-codes. Resolve formatting
conflicts caused by biome rollout; preserve both feature streams:
PR's external 2FA token + signing-session 2FA proof additions plus
main's RateLimit/RecipientExpired/signingReminders/date-auto-insert.

In complete-document-with-token.ts, drop the duplicate early
field-fetching block introduced when main moved that logic later
with date auto-insert support; keep the EXTERNAL_TWO_FACTOR_AUTH
check using derivedRecipientActionAuth.

turbo.json

@@ -48,10 +48,16 @@
     "NEXT_PUBLIC_POSTHOG_KEY",
     "NEXT_PUBLIC_FEATURE_BILLING_ENABLED",
     "NEXT_PUBLIC_DISABLE_SIGNUP",
+    "NEXT_PUBLIC_DISABLE_EMAIL_PASSWORD_SIGNUP",
+    "NEXT_PUBLIC_DISABLE_GOOGLE_SIGNUP",
+    "NEXT_PUBLIC_DISABLE_MICROSOFT_SIGNUP",
+    "NEXT_PUBLIC_DISABLE_OIDC_SIGNUP",
+    "NEXT_PRIVATE_ALLOWED_SIGNUP_DOMAINS",
     "NEXT_PRIVATE_PLAIN_API_KEY",
     "NEXT_PUBLIC_DOCUMENT_SIZE_UPLOAD_LIMIT",
     "NEXT_PRIVATE_DOCUMENSO_LICENSE_KEY",
     "NEXT_PRIVATE_DATABASE_URL",
+    "NEXT_PRIVATE_DATABASE_REPLICA_URLS",
     "NEXT_PRIVATE_DIRECT_DATABASE_URL",
     "NEXT_PRIVATE_LOGGER_FILE_PATH",
     "NEXT_PRIVATE_SIGNING_TRANSPORT",
@@ -113,6 +119,9 @@
     "NEXT_PRIVATE_GITHUB_TOKEN",
     "NEXT_PRIVATE_BROWSERLESS_URL",
     "NEXT_PRIVATE_JOBS_PROVIDER",
+    "NEXT_PRIVATE_REDIS_URL",
+    "NEXT_PRIVATE_REDIS_PREFIX",
+    "NEXT_PRIVATE_BULLMQ_CONCURRENCY",
     "NEXT_PRIVATE_INNGEST_APP_ID",
     "INNGEST_EVENT_KEY",
     "NEXT_PRIVATE_INNGEST_EVENT_KEY",
@@ -133,7 +142,11 @@
     "E2E_TEST_AUTHENTICATE_USERNAME",
     "E2E_TEST_AUTHENTICATE_USER_EMAIL",
     "E2E_TEST_AUTHENTICATE_USER_PASSWORD",
+    "DANGEROUS_BYPASS_RATE_LIMITS",
     "NEXT_PUBLIC_USE_INTERNAL_URL_BROWSERLESS",
-    "NEXT_PRIVATE_OIDC_PROMPT"
+    "NEXT_PRIVATE_OIDC_PROMPT",
+    "NEXT_PRIVATE_WEBHOOK_SSRF_BYPASS_HOSTS",
+    "NEXT_PUBLIC_TURNSTILE_SITE_KEY",
+    "NEXT_PRIVATE_TURNSTILE_SECRET_KEY"
   ]
 }