more merges from misskey

What does this PR do?

as usual, a batch of upstream changes. notice that this applies after !465 (closed) and !472 (closed)

summary:

• !459 (merged) and !440 (merged) were picked by upstream, so @Leah and @supakaity have more of their code upstreamed now
• also @luna's move of Cypress tests to TypeScript
• login forms are more explicit on when they accept a backup code and when a TOTP value (both as replacements for WebAuthn)
• URL previews can now be disabled, and there's a bunch of way to tweak them
• antennas can exclude bots

Contribution Guidelines By submitting this merge request, you agree to follow our Contribution Guidelines

• I agree to follow this project's Contribution Guidelines
• I have made sure to test this pull request (well, it compiles and lints…)