All deployments

Syncs written reviews for every app nightly from App Store Connect.

Sync now spins and reads Syncing… until the job finishes, then the
page refreshes with the new numbers.

Fall back to fawazahmed0's currency API for them, and convert what a
failed sync stored before it failed.

config/deploy.yml passed RUBY_VERSION to the Docker build and still said
the old Ruby, overriding the Dockerfile and failing bundle install.

Clears the sqlite3 advisory. Ruby 3.2 is end of life, so .ruby-version,
Dockerfile and CI move to 3.4.9. Also applies the autocorrectable RuboCop
offenses from the newer cops.

config/deploy.yml passed RUBY_VERSION to the Docker build and still said
the old Ruby, overriding the Dockerfile and failing bundle install.

config/deploy.yml passed RUBY_VERSION to the Docker build and still said
the old Ruby, overriding the Dockerfile and failing bundle install.

config/deploy.yml passed RUBY_VERSION to the Docker build and still said
the old Ruby, overriding the Dockerfile and failing bundle install.

config/deploy.yml passed RUBY_VERSION=3.2.3 to the Docker build, which
overrode the Dockerfile and failed on rbs needing Ruby 3.3+. The backup
size now comes from File.size instead of a shell call, and the weak
link_to finding is recorded in config/brakeman.ignore, so scan_ruby exits 0.

config/deploy.yml passed RUBY_VERSION to the Docker build and still said
the old Ruby, overriding the Dockerfile and failing bundle install.

Rails 8.1.4 loads ruby-vips when the app boots, so scan_js needs the
library like the test job already does. The past-date transcription test
now stubs Tools::MoodSuggester like its siblings; without credentials in
CI it was reaching for a nil OpenAI key.

Drops the obsolete webdrivers gem, which pinned selenium-webdriver to the
vulnerable 4.1.0; Selenium Manager handles drivers now.

Fixes the Active Storage advisory in Rails 8.1.3 and the loofah, mail,
rails-html-sanitizer, json, crass and sqlite3 advisories. Also fixes the
array bracket spacing RuboCop offenses.