chore(frontend): fix ESLint, add Pint+ESLint pre-commit hook, centralize v-html

Fix the broken ESLint setup: add vue-eslint-parser and @typescript-eslint/parser
and wire the TS parser into eslint.config.mjs so .ts and <script lang=ts> parse
(was failing outright). Clear the resulting backlog to a clean 0/0 baseline —
fix genuine issues, relax two intentional-pattern rules (multi-word-component-names,
no-required-prop-with-default).

Add a committed .githooks/pre-commit (enabled via core.hooksPath, auto-set by the
prepare script) that runs Pint on staged PHP and ESLint --max-warnings 0 on staged
resources/scripts JS/TS/Vue, blocking on failure. Add composer/npm lint scripts and
document the gate in CLAUDE.md.

Replace every scattered v-html with a single audited BaseSanitizedHtml component
that DOMPurify-sanitizes its input (new utils/markdown.ts sanitizeHtml), so
server/registry-provided HTML is actually sanitized and vue/no-v-html stays enabled
everywhere but one reviewed sink.

resources/scripts/components/base/BaseMultiselect.vue

@@ -27,7 +27,6 @@
           name="tag"
           :option="option.raw"
           :handle-tag-remove="handleTagRemove"
-          :handleTagRemove="handleTagRemove"
           :disabled="disabled"
         >
           <span
@@ -228,11 +227,11 @@
       />
       <template v-else>
         <input
-          v-for="(value, index) in nativeValues"
+          v-for="(nativeValue, index) in nativeValues"
           :key="index"
           type="hidden"
           :name="`${name}[]`"
-          :value="value"
+          :value="nativeValue"
         />
       </template>
     </template>