Update stuff so we can pass build hopefully

AGENTS.md

@@ -23,6 +23,8 @@
 - Preserve `typescript.ignoreBuildErrors` in Next config.
 - Do not modify Sentry config or `tools/tailwind/theme.css` unless requested.
 - Generated `.cache`, `.turbo`, `.local`, and environment files are ignored.
+- `scripts/convex-codegen` generates Convex API files for checks and image
+  builds when deployment env is available; do not hand-edit generated output.
 
 ## Environment rules
 
@@ -36,6 +38,9 @@
   variables from Infisical into the selected Convex deployment. Backend
   dev/setup scripts run it before `convex dev`.
 - CI uses Gitea-injected secrets or `CI_ENV_FILE` and must not call Infisical.
+- CI must provide Convex deployment env for codegen, either
+  `CONVEX_SELF_HOSTED_URL` plus `CONVEX_SELF_HOSTED_ADMIN_KEY`, or
+  `CONVEX_DEPLOYMENT`.
 - App code imports validated variables from `@/env`, never `process.env`.
 - Add cache-relevant variables to `turbo.json` `globalEnv`.
 
@@ -70,5 +75,6 @@ never connects to staging.
 ## Validation
 
 Use `bun typecheck`, never a production build for routine validation. The full
-gate is `SKIP_E2E=1 bun run ci:check`; local-stack smoke e2e is `bun test:e2e`.
+gate is `SKIP_E2E=1 bun run ci:check`; it runs Convex codegen before checking.
+Local-stack smoke e2e is `bun test:e2e`.
 Pre-commit runs lint-staged serially and pre-push runs the bounded full gate.