framework: also allow cors from referer header

workspace: use esnext set operations

ui: messages: use new websocket gateway

workspace: upgrade to mantine@9 and cordis@4-rc

core: hide problem status for hidden training problem

patch eslint rules

judge: add override config

update eslint rules

util: switch to pure module

domain: permission: filter out placeholder bit

core: only trigger auth log for non-guest

ui: interrupt old transition

scoreboard-xcpcio: fix #1137

ui: skip transition if not visible

ui: fetch lazy resources from cdn