Replace jshint with eslint and override lodash to fix vulnerability

Removes jshint (and its lodash@~4.17.21 pin) in favor of eslint, which
unblocks overriding lodash to 4.18.1 and clears the GHSA-r5fr-rjxr-66jc
and GHSA-f23m-r3pf-42rh advisories. The new eslint config matches
jshint's practical behavior on this codebase, and the before_prepare
hook is rewritten to shell out to eslint. Stale per-file jshint pragmas
are stripped throughout www/js since their rules are now configured
globally.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: connortechnology

.jshintrc

@@ -0,0 +1,106 @@
+export default [
+  {
+    files: ["www/js/**/*.js"],
+    languageOptions: {
+      ecmaVersion: 2015,
+      sourceType: "script",
+      globals: {
+        // Browser
+        window: "readonly",
+        document: "readonly",
+        navigator: "readonly",
+        localStorage: "readonly",
+        sessionStorage: "readonly",
+        location: "readonly",
+        history: "readonly",
+        setTimeout: "readonly",
+        clearTimeout: "readonly",
+        setInterval: "readonly",
+        clearInterval: "readonly",
+        XMLHttpRequest: "readonly",
+        FormData: "readonly",
+        FileReader: "readonly",
+        Blob: "readonly",
+        URL: "readonly",
+        atob: "readonly",
+        btoa: "readonly",
+        Image: "readonly",
+        Event: "readonly",
+        CustomEvent: "readonly",
+        requestAnimationFrame: "readonly",
+        cancelAnimationFrame: "readonly",
+        fetch: "readonly",
+        Headers: "readonly",
+        Request: "readonly",
+        Response: "readonly",
+        performance: "readonly",
+        Worker: "readonly",
+        HTMLElement: "readonly",
+        HTMLCanvasElement: "readonly",
+        HTMLVideoElement: "readonly",
+        screen: "readonly",
+        getComputedStyle: "readonly",
+        matchMedia: "readonly",
+        MutationObserver: "readonly",
+
+        // Development
+        console: "readonly",
+        alert: "readonly",
+        confirm: "readonly",
+        prompt: "readonly",
+
+        // Cordova / App globals
+        cordova: "readonly",
+        StatusBar: "readonly",
+        angular: "readonly",
+        ionic: "readonly",
+        moment: "readonly",
+        Masonry: "readonly",
+        Packery: "readonly",
+        Draggabilly: "readonly",
+        imagesLoaded: "readonly",
+        Chart: "readonly",
+        saveAs: "readonly",
+        chrome: "readonly",
+        URI: "readonly",
+        localforage: "readonly",
+        CryptoJS: "readonly",
+        Connection: "readonly",
+        LZString: "readonly",
+        vis: "readonly",
+        timeline: "readonly",
+        PushNotification: "readonly",
+        ConnectSDK: "readonly",
+        ContactFindOptions: "readonly",
+        $: "readonly",
+        MobileAccessibility: "readonly",
+        hello: "readonly",
+        DJS: "readonly",
+        FirebasePlugin: "readonly",
+        gifshot: "readonly",
+        ReadableStream: "readonly",
+        LibraryHelper: "readonly",
+        GifWriter: "readonly",
+        NeuQuant: "readonly",
+        LocalFileSystem: "readonly",
+        FileError: "readonly",
+      },
+    },
+    rules: {
+      // Enforcing (from jshint config)
+      "no-bitwise": "error",
+      "no-extend-native": "error",
+      "no-caller": "error",
+
+      // Off to match jshint's practical behavior on this codebase
+      "no-undef": "off",
+      "eqeqeq": "off",
+      "curly": "off",
+      "no-unused-vars": "off",
+      "strict": "off",
+      "no-loop-func": "off",
+      "no-return-assign": "off",
+      "dot-notation": "off",
+    },
+  },
+];

eslint.config.mjs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+
+var childProcess = require('child_process');
+var path = require('path');
+
+var projectRoot = path.resolve(__dirname, '..', '..');
+var eslintBin = path.join(projectRoot, 'node_modules', '.bin', 'eslint');
+
+console.log('Linting www/js/ with ESLint...');
+
+try {
+    childProcess.execSync(
+        eslintBin + ' www/js/',
+        { cwd: projectRoot, stdio: 'inherit' }
+    );
+    console.log('ESLint: no errors found.');
+} catch (e) {
+    console.error('ESLint found errors. Build aborted.');
+    process.exit(1);
+}