feat(review): #90 photo strip — keep/remove, drag-reorder, leftmost=primary, persist

REVIEW-5 / PUBLISH-45: owner edits the stored photo lineup in Review — tap a
card to keep/remove, drag to reorder, leftmost kept photo = primary (Woo
cover). The kept set must contain a clean calibration + its dimension-overlay
copy; publish is blocked until it does.

- backend: role column on slab_photos (schema + idempotent _migrate ALTER),
  role in photo CRUD + new DELETE endpoint, Woo image order by role-rank
  (clean→overlay→batch) per PUBLISH-45
- frontend: Review photo strip (render from listPhotos, keep/remove,
  HTML5 drag-reorder, dynamic PRIMARY badge from .primary class),
  persistLineup() re-seq kept + drop removed before entering Publish
- tests: lineup.ts unit, e2e review-photo-strip.spec, backend role + order

Refs: #90, REVIEW-5, PUBLISH-45

frontend/src/api/slabs.ts

@@ -159,6 +159,8 @@ export interface PhotoRow {
   id: string;
   seq: number;
   is_calibration: number;
+  /** #90: lineup kind (clean cal / dimension-overlay copy / batch). */
+  role: 'calibration' | 'overlay' | 'batch';
   width_px: number | null;
   height_px: number | null;
   has_original: number;
@@ -169,6 +171,8 @@ export interface UploadPhotoInput {
   photoId: string; // client-generated UUIDv4
   seq?: number;
   isCalibration: boolean;
+  /** #90: lineup kind; defaults to batch. */
+  role?: 'calibration' | 'overlay' | 'batch';
   original: Blob;
   processed?: Blob | null;
 }
@@ -178,6 +182,7 @@ export interface UploadPhotoResult {
   slab_id: string;
   seq: number;
   is_calibration: number;
+  role: 'calibration' | 'overlay' | 'batch';
   original_retained: boolean;
   processed_retained: boolean;
 }
@@ -193,6 +198,7 @@ export function uploadPhoto(slabId: string, input: UploadPhotoInput): Promise<Up
   form.append('photo_id', input.photoId);
   if (input.seq != null) form.append('seq', String(input.seq));
   form.append('is_calibration', input.isCalibration ? '1' : '0');
+  form.append('role', input.role ?? 'batch');
   const origName = input.original instanceof File ? input.original.name : 'original.png';
   form.append('original', input.original, origName);
   if (input.processed) form.append('processed', input.processed, 'processed.png');
@@ -202,6 +208,49 @@ export function uploadPhoto(slabId: string, input: UploadPhotoInput): Promise<Up
   }).then((r) => parse<UploadPhotoResult>(r));
 }
 
+// #90: drop a photo the owner removed in Review (keep/remove edit).
+export function deletePhoto(slabId: string, photoId: string): Promise<void> {
+  return fetch(`/api/v1/slabs/${encodeURIComponent(slabId)}/photos/${encodeURIComponent(photoId)}`, {
+    method: 'DELETE',
+  }).then((r) => parse<void>(r));
+}
+
+/**
+ * #90: persist an edited Review photo lineup. `kept` is the owner's final
+ * order (leftmost = primary); each entry re-uploads with a fresh seq so the
+ * stored `seq` reflects the keep order. `removed` photos are dropped. Every
+ * kept photo's blob is re-sent (original + processed) because the server
+ * stores only the BLOB — there is no separate re-seq endpoint.
+ */
+export interface LineupPhoto {
+  id: string;
+  role: 'calibration' | 'overlay' | 'batch';
+  isCalibration: boolean;
+  original: Blob;
+  processed: Blob | null;
+}
+
+export async function persistLineup(
+  slabId: string,
+  kept: LineupPhoto[],
+  removed: string[],
+): Promise<void> {
+  for (const id of removed) {
+    await deletePhoto(slabId, id);
+  }
+  for (let i = 0; i < kept.length; i++) {
+    const p = kept[i];
+    await uploadPhoto(slabId, {
+      photoId: p.id,
+      seq: i + 1,
+      isCalibration: p.isCalibration,
+      role: p.role,
+      original: p.original,
+      processed: p.processed,
+    });
+  }
+}
+
 export function photoUrl(
   slabId: string,
   photoId: string,