Merge remote-tracking branch 'origin/main' into codex/housekeeping-rebuild-stepwise

package.json

@@ -18,6 +18,7 @@
 		"diag:permissions": "tsx scripts/diagnose-permission-page.ts",
 		"jobs:worker": "tsx scripts/jobs-worker.ts",
 		"test": "vitest run",
+		"test:e2e": "playwright test",
 		"typecheck": "tsc --noEmit",
 		"db:generate": "drizzle-kit generate",
 		"db:migrate": "tsx scripts/apply-migrations.ts",
@@ -41,10 +42,10 @@
 		"clsx": "2.1.1",
 		"cmdk": "1.1.1",
 		"croner": "10.0.1",
-		"dompurify": "3.4.14",
 		"drizzle-orm": "0.45.2",
 		"hash-wasm": "4.12.0",
 		"ioredis": "6.0.0",
+		"isomorphic-dompurify": "^4.1.0",
 		"jpeg-js": "0.4.4",
 		"jsonc-parser": "3.3.1",
 		"jszip": "3.10.1",
@@ -54,7 +55,7 @@
 		"motion": "13.1.1",
 		"music-metadata": "11.15.0",
 		"mysql2": "3.24.2",
-		"next": "16.3.3",
+		"next": "16.3.4",
 		"next-auth": "5.0.0-beta.32",
 		"next-intl": "4.14.1",
 		"otplib": "13.5.0",
@@ -71,6 +72,7 @@
 	},
 	"devDependencies": {
 		"@biomejs/biome": "2.5.11",
+		"@playwright/test": "^1.62.1",
 		"@tailwindcss/forms": "0.5.11",
 		"@tailwindcss/postcss": "4.3.3",
 		"@tailwindcss/typography": "0.5.20",