Signed-off-by: oppiliappan <me@oppi.li>

- `inline-block` on li was too general, this only applies on
`li:has(input)` now
- all styles have been moved to input.css and apply only to children of
prose

Signed-off-by: oppiliappan <me@oppi.li>

- initialize sanitizer once, and reuse for life
- improve policies, and allow sanitizer to hold multiple policies
(this will come in handy, for PR titles, repo description, profiles
description etc.)
- add general safe items to allow list, most of these are generated by
goldmark GFM

Signed-off-by: oppiliappan <me@oppi.li>

Even though nothing in this folder would match the extensions we watch,
probably makes sense to not even waste the cycles doing so.

Signed-off-by: Winter <winter@winter.cafe>

This also switches away from `nixos-shell` in the process as by this
point it wasn't really adding much to our setup except inflexibility.

Signed-off-by: Winter <winter@winter.cafe>

It's unidiomatic, and doesn't allow extension by way of changing the
systemd service options (like is done in the following commit).

Signed-off-by: Winter <winter@winter.cafe>

7a076be1af4677a7246a792fecb463e4e6f1afee, but for the actual file *tree*
template (used anywhere we show a diff of a tree).

Signed-off-by: Winter <winter@winter.cafe>

non-forked repos show a book icon, forked repos show a fork icon

Signed-off-by: Samuel Newman <mozzius@protonmail.com>

adds a fork indicator to the repo lists in the profile, if repo is forked

Signed-off-by: Samuel Newman <mozzius@protonmail.com>

Signed-off-by: dusk <y.bera003.06@protonmail.com>

I think it'd be nice to make setting `TANGLED_VM_SPINDLE_OWNER`
optional and run VMs without a spindle in that case, but
let's just document the status quo for now.

Signed-off-by: Ilya Grigoriev <ilyagr@users.noreply.github.com>

Signed-off-by: Ilya Grigoriev <ilyagr@users.noreply.github.com>

Signed-off-by: oppiliappan <me@oppi.li>

Signed-off-by: Winter <winter@winter.cafe>

This allows us to be more precise when downloading e.g. tags that have the
same name as branches (in which case Git defaults to the branch, not sure
what go-git does).

Signed-off-by: Winter <winter@winter.cafe>