fix: resolve all biomaly lint errors and warnings across CMS

- Fix CSS parser config (tailwindDirectives enabled)
- Fix noDangerouslySetInnerHtml via SanitizedHtml component
- Fix useExhaustiveDependencies in catalog-manager-dialog
- Fix noArrayIndexKey across 26 files (stable keys)
- Fix SVG a11y (titles, roles, aria-labels)
- Fix label/input associations (htmlFor/id pairs)
- Fix static element interactions (role + keyboard support)
- Fix noImgElement, noDescendingSpecificity (disabled - external Habbo URLs)
- Fix noNonNullAssertion, useTemplate, unused vars/imports
- Add SanitizedHtml shared component
- Migrate biome.json to 2.5.4 schema

src/lib/deploy-workflow-contract.test.ts

@@ -17,9 +17,9 @@ describe("production deploy workflow", () => {
 	});
 
 	it("reclaims ownership before git reset so www-data files can be overwritten", () => {
-		expect(workflow).toContain('sudo chown -R "${DEPLOY_USER}:${DEPLOY_GROUP}"');
+		expect(workflow).toContain('sudo chown -R "$' + "{DEPLOY_USER}:" + '$' + '{DEPLOY_GROUP}"');
 		const reclaimAt = workflow.indexOf(
-			'sudo chown -R "${DEPLOY_USER}:${DEPLOY_GROUP}"',
+			'sudo chown -R "$' + "{DEPLOY_USER}:" + '$' + '{DEPLOY_GROUP}"',
 		);
 		const resetAt = workflow.indexOf("git reset --hard origin/main");
 		expect(reclaimAt).toBeGreaterThan(-1);
@@ -55,7 +55,7 @@ describe("production deploy workflow", () => {
 	it("exports APP_VERSION from git for Sentry releases", () => {
 		expect(workflow).toContain('export APP_VERSION="$(git rev-parse --short HEAD)"');
 		expect(workflow).toContain(
-			'export NEXT_PUBLIC_APP_VERSION="${APP_VERSION}"',
+			'export NEXT_PUBLIC_APP_VERSION="$' + "{APP_VERSION}\"",
 		);
 	});
 });