Re-enable disabled lint rules and right-size CI runners (#18461)

## Summary

- Re-enable one lint rule that was temporarily disabled during the
ESLint-to-Oxlint migration:
- **`twenty/sort-css-properties-alphabetically`** in twenty-front — 578
violations auto-fixed across 390 files
- Document why **`typescript/consistent-type-imports`** cannot be
auto-fixed in twenty-server: NestJS relies on `emitDecoratorMetadata`
for DI, so converting constructor parameter imports to `import type`
erases them at compile time and breaks dependency injection at runtime
- Right-size CI runners, reducing 8-core usage from 18 jobs to 3:

| Change | Jobs | Rationale |
|--------|------|-----------|
| **Keep 8-core** | `ci-merge-queue/e2e-test`,
`ci-front/front-sb-build`, `ci-front/front-build` | Heavy builds needing
max CPU + memory (10GB NODE_OPTIONS, full Storybook webpack bundling) |
| **8-core → 4-core** | `ci-server` (build, lint-typecheck, validation,
test, integration-test), `ci-front/front-sb-test`,
`ci-zapier/server-setup`, `ci-sdk/sdk-e2e-test` | Already sharded into
10-12 parallel instances, I/O-bound (DB/Redis), or moderate single
builds |
| **8-core → 2-core** | `ci-emails/emails-test` | Trivially lightweight
(build + curl health check) |
| **Removed** | `ci-front/front-chromatic-deployment` | Dead code —
permanently disabled with `if: false` |

- Fix merge queue CI issues:
- **Concurrency**: Use `merge_group.base_ref` instead of unique merge
group ref so new queue entries cancel previous runs
- **Required status checks**: Add `merge_group` trigger to all 6
required CI workflows (front, server, shared, website, docker-compose,
sdk) with `changed-files-check` auto-skipped for merge_group events —
status check jobs auto-pass without re-running full CI
- **Build caching**: Add Nx build cache restore/save to E2E test job
with fallback to `main` branch cache for faster frontend and server
builds

## Test plan

- [ ] CI passes on this PR (verifies lint rule auto-fix works)
- [ ] Verify 4-core runner jobs complete within their 30-minute timeouts
- [ ] Verify merge queue status checks auto-pass (ci-front-status-check,
ci-server-status-check, etc.)
- [ ] Verify merge queue E2E concurrency cancels previous runs when a
new PR enters the queue

packages/twenty-e2e-testing/tests/authentication/return-to-path.spec.ts

@@ -9,18 +9,18 @@ const test = base.extend<{ loginPage: LoginPage }>({
 });
 
 const loginAndSelectWorkspace = async (loginPage: LoginPage, page: any) => {
-  await page.waitForLoadState('networkidle');
+  await page.waitForLoadState('domcontentloaded');
   await loginPage.clickLoginWithEmailIfVisible();
   await loginPage.typeEmail(process.env.DEFAULT_LOGIN!);
   await loginPage.clickContinueButton();
   await loginPage.typePassword(process.env.DEFAULT_PASSWORD!);
-  await page.waitForLoadState('networkidle');
+  await page.waitForLoadState('domcontentloaded');
   await loginPage.clickSignInButton();
-  await page.waitForLoadState('networkidle');
+  await page.waitForLoadState('domcontentloaded');
 
   const workspaceButton = page.getByText('Apple', { exact: true });
 
-  await workspaceButton.waitFor({ state: 'visible', timeout: 15000 }).catch(
+  await workspaceButton.waitFor({ state: 'visible', timeout: 30000 }).catch(
     () => {
       // Single workspace mode — no workspace selection
     },
@@ -34,7 +34,7 @@ const loginAndSelectWorkspace = async (loginPage: LoginPage, page: any) => {
     () =>
       !window.location.href.includes('verify') &&
       !window.location.href.includes('welcome'),
-    { timeout: 15000 },
+    { timeout: 30000 },
   );
 };
 
@@ -82,13 +82,13 @@ test.describe('Return-to-path after login', () => {
     page,
     loginPage,
   }) => {
-    const targetPath =
-      '/authorize?clientId=test-client-id&redirectUrl=https%3A%2F%2Fexample.com%2Fcallback';
+    const targetPath = '/settings/accounts';
+    const targetPathWithParams = `${targetPath}?tab=emails&filter=unread`;
 
     await test.step(
       'Navigate to path with query params while logged out',
       async () => {
-        await page.goto(targetPath);
+        await page.goto(targetPathWithParams);
         await page.waitForURL('**/welcome');
         await page.waitForLoadState('domcontentloaded');
       },
@@ -101,14 +101,15 @@ test.describe('Return-to-path after login', () => {
     await test.step(
       'Verify redirected to original path with query params',
       async () => {
-        await page.waitForURL('**/authorize**', { timeout: 15000 });
+        await page.waitForURL(`**${targetPath}**`, {
+          timeout: 30000,
+          waitUntil: 'commit',
+        });
         const url = new URL(page.url());
 
-        expect(url.pathname).toBe('/authorize');
-        expect(url.searchParams.get('clientId')).toBe('test-client-id');
-        expect(url.searchParams.get('redirectUrl')).toBe(
-          'https://example.com/callback',
-        );
+        expect(url.pathname).toBe(targetPath);
+        expect(url.searchParams.get('tab')).toBe('emails');
+        expect(url.searchParams.get('filter')).toBe('unread');
       },
     );
   });