update: as I was writing this, and read about JS earlier I asked a colleague who managed to log in (by turning css off) and deactivated our sole plugin, for which there is already a PR it seems: There’s already a PR https://github.com/Daemonite/discourse-clipboard/pull/5
It might help someone