chore(templates): resolve merge conflict keeping class-based panels and main features

Merge origin/main into simpler-template. Two conflicted paths;
everything else merged cleanly and is staged as-is.

Context of each side:

- This PR (simpler-template) de-inlines presentation from the knowledge
  panel template: templates/web/panels/panel.tt.html no longer carries
  style="..." attributes; the corresponding rules were moved into
  scss/_product-page.scss as reusable classes (.panel_small,
  .panel_margin_small/.panel_margin_large, .panel_title_small,
  .panel_icon very_small/small/large, .small-panel, .small-subtitle,
  .text-icon, .text-container, .valign-middle, .custom-class,
  .custom-container, .image_source, .hidden).

- main kept the inline styles but functionally extended the same areas
  of panel.tt.html: panels without elements now render an inactive
  accordion item (new has_elements variable, accordion-navigation-inactive
  class, <a> switched to <div> via IF has_elements); new title fallbacks
  (title -> name) plus new value_string / value (with percent type)
  subtitle branches; image imgid lookup and nutripatrol_url parameter;
  actions wrapped in <div>; table_id renamed to element.id; map block
  rewritten as an ES module import.

scss/_product-page.scss:

- Conflict was two independent additions at the end of the file.
  Resolution keeps both blocks verbatim: first the knowledge panel
  classes from this PR (required by the refactored template - dropping
  them would leave every panel size/icon/text rule undefined), then
  main's SVG barcode responsive rules (#barcode_div_code/#barcode_div_svg
  inline-block, hidden under 600px). No selector or declaration was
  modified; only the three conflict marker lines were removed.

templates/web/panels/panel.tt.html:

- wrapper_for_other_types header: applied main's functional changes on
  top of the PR's class-based markup. The <ul> keeps the
  panel_margin_[small|large] class instead of main's inline margins;
  the <li> gains main's accordion-navigation-inactive when
  has_elements is false; the title tag uses main's <a>/<div> switch
  while keeping the PR's panel_title_small class instead of main's
  inline padding style.

- subtitle block: kept the PR's class-based span for the existing
  subtitle branch, and grafted main's new value_string / value /
  percent branches onto it. Their inline style="font-size:0.9rem;"
  were expressed through the PR's equivalent small-subtitle class so
  that new content introduced by main follows this PR's stated goal
  (no inline styles in templates). Trailing whitespace from main's
  line was dropped.

- Everything outside the conflict regions is the auto-merge result:
  main's has_elements logic, name/title fallback, value_string/value
  branches, image handling, action wrappers, table id and module-based
  map are all retained unchanged.

Verification: no conflict markers remain; Template::Toolkit directive
counts of the resolved file (opens 65 / ends 67) match main's side
exactly, with the same pre-existing +2 comment-banner offset already
present in both parents, so no block was broken by the resolution.

Merge conflict resolved by Ox Alpha Free (Unlimited), running via
OpenCode Zen.

Co-authored-by: hangy <hangy@hangy.de>

Author: opencode

.DS_Store

@@ -1,11 +1,15 @@
 {
   "name": "Perl",
+  "initializeCommand": "make run_deps",
   "dockerComposeFile": [
     "../docker-compose.yml",
     "../docker/dev.yml",
+    "../docker/run.yml",
     "../docker/devcontainer.yml"
   ],
-  "containerUser": "root",
+  "containerEnv": {
+    "HOME": "/tmp"
+  },
   "capAdd": [
     "SYS_PTRACE"
   ],
@@ -16,12 +20,12 @@
   "runServices": [
     "memcached",
     "postgres",
-    "mongodb",
     "dynamicfront",
     "frontend",
     "incron",
     "minion",
-    "redis"
+    "redis-listener",
+    "keycloak"
   ],
   "workspaceFolder": "/opt/product-opener",
   "customizations": {
@@ -36,7 +40,9 @@
         "dbaeumer.vscode-eslint",
         "stylelint.vscode-stylelint",
         "syler.sass-indented",
-        "mrorz.language-gettext"
+        "mrorz.language-gettext",
+        "SonarSource.sonarlint-vscode",
+        "codecov.codecov"
       ]
     }
   },

.devcontainer/devcontainer.json

@@ -1,4 +1,5 @@
 node_modules
+deps/
 .devcontainer
 .git
 .github
@@ -7,6 +8,10 @@ logs
 debug/
 perl-language-server.log
 
+# tests outputs
+tests/unit/outputs/
+tests/integration/outputs/
+
 openfoodfacts-mongodbdump.tar.gz
 openfoodfacts-products.jsonl.gz
 en.openfoodfacts.org.products.csv
@@ -36,4 +41,4 @@ packager-codes/*.csv
 packager-codes/*.tsv
 packager-codes/*.py
 packager-codes/*.json
-taxonomies*/**/*.sto
+taxonomies*/**/*.json

.dockerignore

@@ -22,3 +22,11 @@ indent_size = 4
 # Python files: 4 spaces indentation
 [*.py]
 indent_size = 4
+
+# Expected test results are for the most part autogenerated and should not have their formatting altered
+[tests/*/expected_test_results/*/*.html]
+end_of_line = unset
+indent_style = unset
+indent_size = unset
+insert_final_newline = unset
+trim_trailing_whitespace = false

.editorconfig

@@ -3,9 +3,12 @@ DOCKER_CLIENT_TIMEOUT=320
 COMPOSE_HTTP_TIMEOUT=320
 COMPOSE_PROJECT_NAME=po_off
 COMPOSE_PATH_SEPARATOR=;
-COMPOSE_FILE=docker-compose.yml;docker/dev.yml
+COMPOSE_FILE=docker-compose.yml;docker/dev.yml;docker/run.yml
 COMPOSE_PROFILES=off
 
+# when we don't need the dependencies
+COMPOSE_FILE_BUILD=docker-compose.yml;docker/dev.yml
+
 # exposition of product opener, leave blank to expose on all ports
 # ends with ":"
 PRODUCT_OPENER_EXPOSE=127.0.0.1:
@@ -25,6 +28,7 @@ WEB_RESOURCES_PATH=./web-default
 PRODUCERS_PLATFORM=0
 PRODUCT_OPENER_DOMAIN=openfoodfacts.localhost
 PRODUCT_OPENER_PORT=80
+PRODUCT_OPENER_HOST_PORT=80
 PRODUCT_OPENER_FLAVOR=openfoodfacts
 PRODUCT_OPENER_FLAVOR_SHORT=off
 
@@ -45,15 +49,20 @@ MONGODB_CACHE_SIZE=8 # GB
 MONGO_INITDB_ROOT_USERNAME=root
 MONGO_INITDB_ROOT_PASSWORD=test
 ROBOTOFF_URL=http://robotoff.openfoodfacts.localhost:5500 # connect to Robotoff running in separate docker-compose deployment
+# Note: we can use port 80
+# because product opener nginx acts as a proxy to folksonomy API
+# to avoid CORS issues
+FOLKSONOMY_URL=http://api.folksonomy.openfoodfacts.localhost
 # connect to openfoodfacts-query running in separate docker-compose deployment.
 # To test locally change to http://host.docker.internal:5510
+# Note you will need to add basic auth to this if you want to upload scans, e.g. http://USER:PASSWORD@query:5510
 QUERY_URL=http://query:5510
 EVENTS_URL=
 FACETS_KP_URL = https://facets-kp.openfoodfacts.org/render-to-html
 # we push updated products to Redis stream so that every service is notified
 # when a product is updated/deleted/created
-# use `redis:6379` locally if you want to enable Redis
-REDIS_URL=
+# and for users subscription / removal etc.
+REDIS_URL=redis:6379
 GOOGLE_CLOUD_VISION_API_KEY=
 CROWDIN_PROJECT_IDENTIFIER=
 CROWDIN_PROJECT_KEY=
@@ -63,5 +72,49 @@ GEOLITE2_ACCOUNT_ID=
 ELASTICSEARCH_HOSTS=
 LOG_LEVEL_ROOT=TRACE
 LOG_LEVEL_MONGODB=TRACE
+LOG_LEVEL_RATE_LIMITER=TRACE
+ODOO_CRM_URL=
+ODOO_CRM_DB=
+ODOO_CRM_USER=
+ODOO_CRM_PASSWORD=
+# SLACK_HOOK_URLS=\#infrastructure=https://example.com,\#team=https://example.org
+
+# No need to have it running, it's just to compose a URL
+# you might also use the .net service
+NUTRIPATROL_URL=http://nutripatrol.localhost
+
+# Keycloak configuration
+# See Auth.pm for definition of levels
+# IMPORTANT: These are set in Config2.pm on public deployments.
+OIDC_IMPLEMENTATION_LEVEL=5
+OIDC_DISCOVERY_URL=http://keycloak:8080/realms/openfoodfacts/.well-known/openid-configuration
+OIDC_CLIENT_ID=OFF
+OIDC_CLIENT_SECRET=Cf4NdSAjZsNO9HLcuXeuvukzFu00roQa
+
+BUILD_CACHE_REPO=openfoodfacts/openfoodfacts-build-cache
+
+# If you want the rate limiter to block requests (return 429) instead of doing nothing,
+# set this to 1. Any other value will disable the blocking.
+RATE_LIMITER_BLOCKING_ENABLED=1
+
+COMMON_NET_NAME=off_shared_network
+
+#11901: Remove once production is migrated. Values are:
+# 0-Keep existing behaviour, 1-write to JSON and STO (STO is still source of truth), 2-Write to JSON and delete STO
+# If the product JSON files need to be removed after reverting back to level 0 then can be deleted with
+# find /mnt/podata/products -name "*.json" ! -name "*scans.json" -delete
+SERIALIZE_TO_JSON=2
+
+# recipe-estimator product service
+# To test a locally running recipe-estimator with product opener in a docker dev environment:
+# - run recipe-estimator with `uvicorn recipe_estimator.main:app --reload --host 0.0.0.0`
+# - set environment variable to http://host.docker.internal:5521/api/v3/estimate_recipe
+RECIPE_ESTIMATOR_URL=https://recipe-estimator.openfoodfacts.org/api/v3/estimate_recipe
+
+# Set recipe_estimator_service to "estimate_recipe" to get default algorithm,
+# or "estimate_recipe_[glop|scipy|cvxpy] to use a specific algorithm
+# or "product_opener" to use the legacy Product Opener algorithm
+RECIPE_ESTIMATOR_SERVICE=product_opener
 
-BUILD_CACHE_REPO=openfoodfacts/openfoodfacts-build-cache
+# API Key required to access health check API, set to any value to enable the check of the key, set to the expected value to have a successful check
+HEALTH_CHECK_API_KEY=