chore: update eslint and stylelint configs and re-sync modern-normalize (#38982)

- update the vendored `modern-normalize` to v3.0.1
- require descriptions for lint disables in TS and CSS, same as we
already have in Go.
- disable core rules covered by `regexp/*` and `unicorn/*`, and ones
that cannot fire
- stop applying vitest rules to the playwright files in `tests/e2e`
- enable 7 stylelint rules, mostly `no-unknown` and `no-invalid` checks
- drop 2 unnecessary vendor prefixes (safari v17+, chrome v120+)
- look up ids via `querySelector` with `CSS.escape` instead of
`getElementById`
- remove stale doc about `@ts-expect-error`, it's forbidden
- misc dev doc fixes

Every declaration that `modern-normalize` v3 removes was checked against
chromium, webkit and firefox defaults first. The `hr` color and the
`:-moz-focusring` outline are kept as documented deviations, dropping
those does change rendering.

---------

Signed-off-by: silverwind <me@silverwind.io>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

web_src/js/markup/anchors.ts

@@ -29,15 +29,13 @@ function scrollToAnchor(encodedId?: string): void {
   if (!elemId) return;
 
   const prefixedId = addPrefix(elemId);
-  // eslint-disable-next-line unicorn/prefer-query-selector
-  let el = document.getElementById(prefixedId);
+  let el = document.querySelector<HTMLElement>(`#${CSS.escape(prefixedId)}`);
 
   // check for matching user-generated `a[name]`
   el = el ?? document.querySelector(`a[name="${CSS.escape(prefixedId)}"]`);
 
   // compat for links with old 'user-content-' prefixed hashes
-  // eslint-disable-next-line unicorn/prefer-query-selector
-  el = (!el && hasPrefix(elemId)) ? document.getElementById(elemId) : el;
+  el = (!el && hasPrefix(elemId)) ? document.querySelector<HTMLElement>(`#${CSS.escape(elemId)}`) : el;
 
   el?.scrollIntoView();
 }

web_src/js/markup/render-iframe.test.ts

@@ -24,7 +24,7 @@ describe('navigateToIframeLink', () => {
     const navigations = captureNavigations();
     const openSpy = vi.spyOn(window, 'open').mockImplementation(() => null);
     const errorSpy = vi.spyOn(console, 'error').mockImplementation(() => undefined);
-    // eslint-disable-next-line no-script-url
+    // eslint-disable-next-line no-script-url -- the test asserts that javascript: links are rejected
     navigateToIframeLink('javascript:void(0);', '_blank');
     navigateToIframeLink('data:image/svg+xml;utf8,<svg></svg>', '');
     expect(openSpy).toHaveBeenCalledTimes(0);