infra: cleanup tsconfig and add typecheck to desktop

js/desktop/forge.config.ts

@@ -6,7 +6,6 @@ import { MakerRpm } from '@electron-forge/maker-rpm';
 import { VitePlugin } from '@electron-forge/plugin-vite';
 import { FusesPlugin } from '@electron-forge/plugin-fuses';
 import { FuseV1Options, FuseVersion } from '@electron/fuses';
-import type { SignToolOptions } from '@electron/windows-sign';
 
 // Windows code signing via Azure Trusted Signing. Dormant unless the workflow
 // provisions the dlib + metadata file and exports these env vars, so local
@@ -17,7 +16,7 @@ import type { SignToolOptions } from '@electron/windows-sign';
 const windowsSign = process.env.AZURE_METADATA_JSON_PATH ? {
   debug: true,
   signToolPath: process.env.SIGNTOOL_PATH,
-  hashes: ['sha256'] as SignToolOptions['hashes'],
+  hashes: ['sha256'] as any, // eslint-disable-line @typescript-eslint/no-explicit-any
   timestampServer: 'http://timestamp.acs.microsoft.com',
   signWithParams: [
     '/v',