merge issue-89-metadata-lock → main (Create-string model, #89/#90)

Drop the metadata_locked column + "Save and lock" UI end-to-end. The
review endpoint now builds the deterministic title/short_description on
every call; the owner's Create title / Create short desc buttons fire
the build and write the result (force-overwrite contract). commitReview
auto-fills only empty fields (no owner-clobber) and folds the
deterministic copy into its single PUT (kills the client_rev 409
cascade).

Taken wholesale from the branch: photo strip, wood primary/secondary,
server-side thickness band (hidden from UI, passed to Woo on publish),
and fixes #80/#82/#83/#84.

- backend: remove metadata_locked from schema.sql, db sentinels,
  slabs.py client fields/exposure, review.py lock action; review
  always computes title/short_desc
- frontend: slabs.ts + Review.svelte drop the lock model, add
  Create-string workflow + wood primary + photo strip
- e2e: m3-create + review-photo-strip rewritten for the Create-string
  contract; thickness-band test asserts absence (per #90)
- deploy: recreate LAN binds (override-m3.yml was absent); verify
  metadata_locked gone, review builds title, PUT persists

Gates: backend 117/117, unit 88/88, tsc clean, e2e 6/6 (m3-create +
photo-strip). Live UAT verified at 192.168.1.202:10881.

backend/db/__init__.py

@@ -55,7 +55,6 @@ _SCHEMA_SENTINELS = [
     ("settings", "value"),
     ("slabs", "deleted_at"),
     ("slabs", "server_rev"),
-    ("slabs", "metadata_locked"),
     ("slab_photos", "original_blob"),
     ("sync_log", "payload_hash"),
 ]

backend/db/schema.sql

@@ -35,9 +35,6 @@ CREATE TABLE IF NOT EXISTS slabs (
     species_confidence REAL,
     figure_confidence REAL,
     grade_confidence REAL,
-    -- #89: explicit owner lock of the confirmed taxonomy set. Deterministic
-    -- title/short_description are built and persisted only once this is 1.
-    metadata_locked INTEGER CHECK(metadata_locked IN (0,1) OR metadata_locked IS NULL),
     inference_status TEXT CHECK(inference_status IN ('inferring','done','failed') OR inference_status IS NULL),
     calibration_photo_id TEXT,
     client_rev INTEGER NOT NULL DEFAULT 1,