[web] throw if ALLOWED_IMAGE_NAMES is not defined in SaaS (#31172)

* [monorepo] use ALLOWED_IMAGE_NAMES from production

* [web] add ALLOWED_IMAGE_NAMES to CI env

* [web] throw if ALLOWED_IMAGE_NAMES is not defined in SaaS

* [e2e] update references to ALLOWED_IMAGE_NAMES

* [web] check for ALLOWED_IMAGE_NAMES from the settings-check module

GitOrigin-RevId: 43a7343e80521e3f7e496fb771593b4c22df7d1e

services/web/docker-compose.common.env

@@ -48,3 +48,5 @@ OVERLEAF_SAML_CERT=MIIDXTCCAkWgAwIBAgIJAOvOeQ4xFTzsMA0GCSqGSIb3DQEBCwUAMEUxCzAJB
 # $ docker run --rm node:24.13.0 --print 'require("crypto").generateKeySync("aes", { length: 256 }).export().toString("hex")'
 DEVICE_HISTORY_SECRET=1b46e6cdf72db02845da06c9517c9cfbbfa0d87357479f4e1df3ce160bd54807
 QUEUE_PROCESSING_ENABLED=true
+CURRENT_IMAGE_NAME=texlive-full:2025.1
+ALLOWED_IMAGE_NAMES=[{"imageName":"texlive-full:2025.1","imageDesc":"2025"},{"imageName":"wl_texlive:2018.1","imageDesc":"2018"}]

services/web/local-dev.env

@@ -13,7 +13,6 @@ OVERLEAF_SAML_ENTRYPOINT=http://127.0.0.1:22280/simplesaml/saml2/idp/SSOService.
 OVERLEAF_SAML_CALLBACK_URL=http://www.dev-overleaf.com/saml/callback
 COOKIE_DOMAIN=.dev-overleaf.com
 PUBLIC_URL=https://www.dev-overleaf.com
-CURRENT_IMAGE_NAME=texlive-full:2025.1
 LINKED_URL_PROXY=http://127.0.0.1:8081/proxy/secret-proxy-token
 OVERLEAF_CONFIG=$(pwd)/../../config/settings.web.js
 ENABLE_PDF_CACHING=true