Removes main-top.js

The language is render using site setting or user preference

Fixes #3631 

Closes #3388 & Closes #3389.

This PR adds an indication as to what user roles can see an archived
submission based off of [existing
settings](https://github.com/HyphaApp/hypha/issues/3388#issuecomment-1793773642).

- Update psycopg to 3 as it’s not supported by Django 4.2
- Replaced “BaseUserManager().make_random_password”, as it’s deprecated
- Update github action and breakup different checks, making them easier
to debug
- Updated the `makemigrations` checks to display the missing migration
and then fail
- Upgrade django-hijack to 3.4.2
- Update gunicorn to 21.2.0
- Upgrade django slack to 5.19.0
- Upgrade mistune to 3.0.2 (Bug fix release)
- Upgrade whitenoise to 6.6.0
- Update dev dependencies - black, ruff, pre-commit, pytest-django

Closes https://github.com/HyphaApp/hypha/issues/3362

1. Fix link to "view project page"
2. Add bg-light-grey as there are a log of white cards
3. Fix margin top on the top-most card.
4. Do not show supporting documents section if they are not present

Adds a scroll to top button to all the pages, it shows only if the user
scroll past a decent screen size. It's put on the center top so that
it's easily accessible.

**Edit:** Show only when the user is scrolling towards the top.

closes #3642

---------

Co-authored-by: Wes Appler <145372368+wes-otf@users.noreply.github.com>

closes #3080

…from Wagtail admin when Show consent checkbox was set.

Fixes #3649

It is replaced by alpinejs code and causing js exception on the project
page.

Current htmx request that end up being one of the following server
errors are silently ignored. This PR fixes it and capture the error response
and displays it to user. The full page is swapped.

Fixes #ISSUEID

This PR is depended on #3521 

- [x] Passwordless login
- [x] Passwordless signup 
- [x] Allow user to set a password after going to profile.
- [x] Allow user to change their email even if they don't have an email
set.
- [x] Allow user to add their name in the application form if name is
not present in the user account.
- [x] Don't display "Dashboard" link if the user does't have permission
to access to it.
- [x] Allow to use to setup 2FA without account password.
- [x] Display user content on the login screen, if configured (it is an
existing feature)
- [x] If 2FA is enforced, allow the user to submit the application
without setting up 2FA
- [x] Add email re-verification option to elevate, sudo mode, apart from
password
- [x] Update landing page after application submission, on success it
redirects now.
- [x] Update ENABLE_PUBLIC_SIGNUP and FORCE_LOGIN_FOR_APPLICATION to
true by default

# Login/Signup Flow


![image](https://github.com/HyphaApp/hypha/assets/236356/91c22cb1-bd1f-4665-98e2-0350829a5807)


## Updated Login Page with Registration Enabled

![Screenshot 2023-09-13 at 07 53
06@2x](https://github.com/HyphaApp/hypha/assets/236356/424fa2f6-a519-44e3-a9ec-449815dd39b2)


## After providing the email ID

The messaging is kept neutral to hide if the user is already registered
or not. The email will contain more detail, if the account exist or not.

![Screenshot 2023-09-13 at 07 57
27@2x](https://github.com/HyphaApp/hypha/assets/236356/7577447b-edf2-496e-94ca-3c98a8f2f075)

Login email copy
![Screenshot 2023-09-13 at 08 08
36@2x](https://github.com/HyphaApp/hypha/assets/236356/ab2d3e90-da2e-40ec-9f7e-bbb8d9e7235f)

## Signup

New Account Email copy
![Screenshot 2023-09-21 at 07 08
52@2x](https://github.com/HyphaApp/hypha/assets/236356/cb14350b-1cfb-4869-b863-ebbb95701089)

### Profile Page just after signup 
The user after clicking on the signup link in the email is redirect to
homepage. No dashboard is available as the user doesn't have applicant
role. If they click on the "profile" button they see this page with open
to update profile and setup a password and enable 2FA.

If the user decide to change the email, password is not asked if not
password is set, instead an email is sent to authorize the email change.

![Screenshot 2023-09-22 at 08 50
21@2x](https://github.com/HyphaApp/hypha/assets/236356/7ed0cb97-a7ca-49fe-aef5-de8f3890db1e)


## Updated "Sudo" mode page

### For account with password

![Screenshot 2023-10-31 at 7  49
38@2x](https://github.com/HyphaApp/hypha/assets/236356/fe27ad75-7e4b-4226-89c1-ddd7a5548944)

After clicking on the "Send a confirmation code to your email" link

![Screenshot 2023-10-31 at 8  03
28@2x](https://github.com/HyphaApp/hypha/assets/236356/bf7a4098-fd0f-4d55-9850-0862da69d808)


![Screenshot 2023-10-31 at 7  51
03@2x](https://github.com/HyphaApp/hypha/assets/236356/3768e87f-d105-4d54-9cd6-2e2b8a81fa2f)


### For account without password

![Screenshot 2023-10-31 at 7  53
44@2x](https://github.com/HyphaApp/hypha/assets/236356/8c84181a-43ce-4afe-a5be-758e3f0e55f8)


## Updated disable 2FA page

It requires "Sudo" mode, instead of password now. 

![Screenshot 2023-10-31 at 7  48
01@2x](https://github.com/HyphaApp/hypha/assets/236356/2b5c8bd1-27ea-42cd-9c84-608bb351631c)

Fixes #3650 
The PAF page contains multiple cards/boxes, so we want its background as
grey to enhance the visibility of those boxes.

Closes #3442. 

This small migration addition compliments #3445 as it will remove any
previous `NEW_SUBMISSION` events that belong to submissions that no
longer exist. This will allow for the removal of applicants that don't
have any active submission, but can't be deleted due to the `The object
you are trying to delete is used somewhere...` error.

Cheers!

No current version(newly added table to applicant dashboard).

Fixes #3644 

As of now, staff can upload contracts, so the 'waiting for' text is also
updated accordingly from "Awaiting signed contract from Contracting
team" to "Awaiting signed contract from Staff/Contracting team"(depends
on the settings)

Fixes #3655 

Faker v20.x makes a number of test not work. Faker is a dependency of
factory_boy.

An update to factory_boy might fix it or we need to update our tests.
This fix works in the meantime.

Updated the applicant dashboard header as per the latest designs.

Used a custom code instead of admin bar component because needed custom
implementation that is different from other or common admin
bars(headers)

Notes: 

Wagtail 5x has migrations:
```
You have 11 unapplied migration(s). Your project may not work properly until you apply the migrations for app(s): wagtailcore, wagtailsearchpromotions, wagtailusers.
```

- Upgrade Django, wagtail-purge,
Django-pwned-password,django-basic-auth-ip-whitelist
- Move logic from DeleteView -> delete() to form_valid()
- Make test more robust
- Upgrade dj-database-url to 2.x, and enable CONN_HEALTH_CHECKS
- Bump django-two-factor-auth to 1.15.x that has confirmed support for
Django 4.1
- Bump django-ratelimit to 4.1.0
- django-pwned-passwords seems be abandoned
https://github.com/jamiecounsell/django-pwned-passwords/pull/11
(replaced with it with it's fork)

The images are linked relative to page now. This prevents the mkdocs
warnings and also let these images render itself nicely inside the
editor or github interface.

This way of referencing also helps for future if the docs get deployed
to a path instead of a top-level domain

Change the query text to be linguistically correct

Fixes the language used in the clear query section for no results found
in hypha/apply/funds/templates/submissions/all.html

Fixes #3629

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 2.2.3 to
3.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/werkzeug/releases">werkzeug's
releases</a>.</em></p>
<blockquote>
<h2>3.0.1</h2>
<p>This is a security release for the 3.0.x feature branch.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-1">https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-1</a></li>
</ul>
<h2>3.0.0</h2>
<p>This is a feature release, which includes new features, removes
previously deprecated code, and adds new deprecations. The 3.0.x branch
is now the supported fix branch, the 2.3.x branch will become a tag
marking the end of support for that branch. We encourage everyone to
upgrade, and to use a tool such as <a
href="https://pypi.org/project/pip-tools/">pip-tools</a> to pin all
dependencies and control upgrades. Test with warnings treated as errors
to be able to adapt to deprecation warnings early.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-0">https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-0</a></li>
<li>Milestone: <a
href="https://github.com/pallets/werkzeug/milestone/21?closed=1">https://github.com/pallets/werkzeug/milestone/21?closed=1</a></li>
</ul>
<h2>2.3.7</h2>
<p>This is a fix release for the 2.3.x feature branch.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-7">https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-7</a></li>
<li>Milestone: <a
href="https://github.com/pallets/werkzeug/milestone/33?closed=1">https://github.com/pallets/werkzeug/milestone/33?closed=1</a></li>
</ul>
<h2>2.3.6</h2>
<p>This is a fix release for the 2.3.x feature branch.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-6">https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-6</a></li>
<li>Milestone: <a
href="https://github.com/pallets/werkzeug/milestone/32?closed=1">https://github.com/pallets/werkzeug/milestone/32?closed=1</a></li>
</ul>
<h2>2.3.5</h2>
<p>This is a fix release for the 2.3.x feature branch.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-5">https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-5</a></li>
<li>Milestone: <a
href="https://github.com/pallets/werkzeug/milestone/31?closed=1">https://github.com/pallets/werkzeug/milestone/31?closed=1</a></li>
</ul>
<h2>2.3.4</h2>
<p>This is a fix release for the 2.3.x release branch.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-4">https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-4</a></li>
<li>Milestone: <a
href="https://github.com/pallets/werkzeug/milestone/30?closed=1">https://github.com/pallets/werkzeug/milestone/30?closed=1</a></li>
</ul>
<h2>2.3.3</h2>
<p>This is a fix release for the 2.3.x release branch.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-3">https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-3</a></li>
<li>Milestone: <a
href="https://github.com/pallets/werkzeug/milestone/29?closed=1">https://github.com/pallets/werkzeug/milestone/29?closed=1</a></li>
</ul>
<h2>2.3.2</h2>
<p>This is a fix release for the 2.3.x release branch.</p>
<ul>
<li>Changes: <a
href="https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-2">https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-2</a></li>
<li>Milestone: <a
href="https://github.com/pallets/werkzeug/milestone/28?closed=1">https://github.com/pallets/werkzeug/milestone/28?closed=1</a></li>
</ul>
<h2>2.3.1</h2>
<p>This is a fix release for the 2.3.x release branch.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/werkzeug/blob/main/CHANGES.rst">werkzeug's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.0.1</h2>
<p>Released 2023-10-24</p>
<ul>
<li>Fix slow multipart parsing for large parts potentially enabling DoS
attacks. :cwe:<code>CWE-407</code></li>
</ul>
<h2>Version 3.0.0</h2>
<p>Released 2023-09-30</p>
<ul>
<li>Remove previously deprecated code. <code>2768</code></li>
<li>Deprecate the <code>__version__</code> attribute. Use feature
detection, or
<code>importlib.metadata.version(&quot;werkzeug&quot;)</code>, instead.
:issue:<code>2770</code></li>
<li><code>generate_password_hash</code> uses scrypt by default.
:issue:<code>2769</code></li>
<li>Add the <code>&quot;werkzeug.profiler&quot;</code> item to the WSGI
<code>environ</code> dictionary
passed to <code>ProfilerMiddleware</code>'s <code>filename_format</code>
function. It contains
the <code>elapsed</code> and <code>time</code> values for the profiled
request. :issue:<code>2775</code></li>
<li>Explicitly marked the PathConverter as non path isolating.
<code>2784</code></li>
</ul>
<h2>Version 2.3.8</h2>
<p>Unreleased</p>
<h2>Version 2.3.7</h2>
<p>Released 2023-08-14</p>
<ul>
<li>Use <code>flit_core</code> instead of <code>setuptools</code> as
build backend.</li>
<li>Fix parsing of multipart bodies. :issue:<code>2734</code> Adjust
index of last newline
in data start. :issue:<code>2761</code></li>
<li>Parsing ints from header values strips spacing first.
:issue:<code>2734</code></li>
<li>Fix empty file streaming when testing. :issue:<code>2740</code></li>
<li>Clearer error message when URL rule does not start with slash.
<code>2750</code></li>
<li><code>Accept</code> <code>q</code> value can be a float without a
decimal part. :issue:<code>2751</code></li>
</ul>
<h2>Version 2.3.6</h2>
<p>Released 2023-06-08</p>
<ul>
<li><code>FileStorage.content_length</code> does not fail if the form
data did not provide a
value. :issue:<code>2726</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pallets/werkzeug/commit/ce4eff5902d4a6b41a20ecc6e4029741284a87fd"><code>ce4eff5</code></a>
Release version 3.0.1</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/b1916c0c083e0be1c9d887ee2f3d696922bfc5c1"><code>b1916c0</code></a>
Fix: slow multipart parsing for huge files with few CR/LF
characters</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/726eaa28593d859548da3477859c914732f012ef"><code>726eaa2</code></a>
Release version 3.0.0</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/64275425888b6ca4f5ebdfa1a9df814317718290"><code>6427542</code></a>
Default the PathConverter (and descendants) to be non part
isolating</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/4820d8c487e5db9f43645c31c4123fce5ac5ad32"><code>4820d8c</code></a>
Provide elapsed and timestamp info to filename_format</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/599993d7382eeb96add9f38b4431a2f50cd2c9f2"><code>599993d</code></a>
Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10 (<a
href="https://redirect.github.com/pallets/werkzeug/issues/2780">#2780</a>)</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/a2394ed51ed8697b5523243acb10cb589c0f7834"><code>a2394ed</code></a>
Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0 (<a
href="https://redirect.github.com/pallets/werkzeug/issues/2779">#2779</a>)</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/1efd6f3c2c31ec9479d8b8d9219bdb042e55bd15"><code>1efd6f3</code></a>
Bump actions/checkout from 3.5.3 to 3.6.0 (<a
href="https://redirect.github.com/pallets/werkzeug/issues/2778">#2778</a>)</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/76a5419d2ee8b7785c0304d58a94d6c0387c976c"><code>76a5419</code></a>
Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10</li>
<li><a
href="https://github.com/pallets/werkzeug/commit/ce8cfe7dbb73b56c982a9c74162084cdb284c2f5"><code>ce8cfe7</code></a>
Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0</li>
<li>Additional commits viewable in <a
href="https://github.com/pallets/werkzeug/compare/2.2.3...3.0.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=werkzeug&package-manager=pip&previous-version=2.2.3&new-version=3.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/HyphaApp/hypha/network/alerts

).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This is a starting point for #3427. 

With this functionality the wagtail admin panel can be used to add a
custom HTML header - very similarly to the footer. **Unlike the
footer**, this field is not required and when left blank the default
header will be used. This goal is to use this to be able to recreate the
WordPress site navbar/header.


## Screenshots
**Using a blank "Header content" wagtail field:**

_The empty "Header Content" Wagtail admin field_
<img width="876" alt="Screenshot 2023-10-06 at 1 32 48 PM"
src="https://github.com/HyphaApp/hypha/assets/145372368/515b0e86-dc40-47e7-b57e-f19d85fad2f6">

_The usual nav bar_
<img width="1710" alt="Screenshot 2023-10-06 at 2 23 19 PM"
src="https://github.com/HyphaApp/hypha/assets/145372368/dbe4cfc0-15e5-453d-9900-e34ed546a1d6">

**Using a custom HTML header (rough-cut, not finalized)**

_The start of the custom HTML "Header content" field_
<img width="881" alt="Screenshot 2023-10-06 at 2 15 05 PM"
src="https://github.com/HyphaApp/hypha/assets/145372368/3668962f-5c9e-45cd-a7c9-c391a6c79e06">

_The custom header that shows resemblance to the WordPress header (needs
more tweaking)_
<img width="1707" alt="Screenshot 2023-10-06 at 2 14 38 PM"
src="https://github.com/HyphaApp/hypha/assets/145372368/05378fb4-6fac-4867-9562-5c023e6102a2">

Being that this is my first PR feel free to give any critique you see
necessary! Anything is helpful. Cheers!

Fixes #3609 

Staff contract upload permissions depends on env variable
"STAFF_UPLOAD_CONTRACT"

Issue:
'Approved by staff' and 'Changes requested by finance' are internal
statuses, and shouldn't be visible to the applicant.

![image](https://github.com/HyphaApp/hypha/assets/23638629/62396999-a176-4579-bea0-649bde2af154).

How it should be(fixed in this PR):
Staff view- 

![image](https://github.com/HyphaApp/hypha/assets/23638629/7dcd6d9e-f905-42f8-9770-4f62abd83ed9)

Applicant view-

![image](https://github.com/HyphaApp/hypha/assets/23638629/fc6eb21b-7d58-4d8c-b55b-8954795a7ddc)

It shows the assigner's name in both places.

Now, the activity contains the assignee name, and the assigner name is
shown as the activity author.

Fixes #3621 

**Problem**: 
Proposal form field on the determination form is disabled by default 'on
load' but there is a case when a user has selected the form and saved
the determination as draft and when the user comes back to submit that
saved determination, the proposal form field will be disabled and on
submission, there will be no proposal form attached(pick default one).

**Solution**:
Add a check if the proposal form field has some value on load then don't
disable it otherwise disable it.
**Why it is disabled at all**: We don't want to confuse the user by
keeping it enabled on the top(We can keep it on top or bottom as we are
appending this field to the streamfield form, and as it is related to
determination field so top is favorable).

Material extension now deprecated as MkDocs for Material now implements
this logic directly.

https://pypi.org/project/mkdocs-material-extensions/

These all have are non-breaking changes

How to reproduce:
- open a application submisssion with checkboxes as an form element.
- Get the error below

```
'str' object has no attribute 'help_text'
```

- black
- coverage
- django-browser-reload
- django-coverage-plugin
- django-debug-toolbar
- pytest-cov
- pytest-split
- pytest-xdist
- reponses
- ruff