Build Seth's changes C1 to C11 (Gitea issues 1, 8, 18, 23, 24, 25, 27, 31, 32, 33, 36)

- C1 (issue 1): over target follows VISUAL ticket hours, not the timer.
- C2 (issue 24): a Q.C. reject always needs a reason; accept needs an NCR number after a reject without one.
- C3 (issue 25): an incomplete unit ITP blocks filing.
- C4 (issue 27): prints open the print dialog on the page, no new tab.
- C5 (issue 31): filing is blocked while VISUAL shows a work order open; the feed sets vclosed on VISUAL packets.
- C6 (issue 8): the data book leaves out the history pages.
- C7 (issue 18): the supervisor approves each received short; accept and filing wait for it.
- C8 (issue 23): per-department checklists, edited by the department supervisor or Admin, frozen at START.
- C9 (issue 32): Q.C. and Clerical may run the stamp check.
- C10 (issue 33): the PM screen and reports are for PS-ProjectMgmt and Admin only.
- C11 (issue 36): the Stall screen lists the packets assigned to the welder, at the supervisor's stall.

Migration 0011. Docs: PLAN (also issue 9 confirmed, issue 4 asked), POLICY, SECURITY, SCHEMA, FEED, README, CHANGELOG.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

tests/server/test_phase8_server_smoke.py

@@ -95,6 +95,8 @@ def test_find_bar_boards_and_pm_reports(shop: Shop) -> None:
     assert qc["kpis"]["waiting"] == 0 and "facets" in qc
     stall = ok(shop("weld.andy").get("/api/shop/stall", params={"station_id": shop.stall(), "flags": "mine"}))
     assert [c["id"] for c in stall["mine"]] == [p_st["id"]]
+    mine = ok(shop("weld.andy").get("/api/stall/mine"))  # change C11: no station picked
+    assert [c["id"] for c in mine["mine"]] == [p_st["id"]] and mine["mine"][0]["station_id"] == shop.stall()
 
     # Project Management
     pmc = shop("pm.paula")
@@ -111,7 +113,8 @@ def test_find_bar_boards_and_pm_reports(shop: Shop) -> None:
     assert [t["key"] for t in ag["tables"]] == ["aging_steps", "aging_open", "aging_history"]
     hr = ok(pmc.get("/api/pm/hours"))
     over_rows = hr["tables"][3]["rows"]
-    assert [r["pid"] for r in over_rows] == [p_st["id"]], hr
+    # change C1: the timer is over its target but there are no ticket hours, so it is not over target
+    assert over_rows == [], hr
     ql = ok(pmc.get("/api/pm/quality"))
     assert [len(t["rows"]) for t in ql["tables"]][:4] == [1, 1, 1, 1], ql
     fd = ok(pmc.get("/api/pm/find", params={"sort": "project", "project_id": project_id}))
@@ -134,4 +137,4 @@ def test_find_bar_boards_and_pm_reports(shop: Shop) -> None:
         kinds = [x[0] for x in conn.execute("SELECT kind FROM print_log ORDER BY id")]
         acts = [x[0] for x in conn.execute("SELECT action FROM audit_events WHERE action = 'report exported'")]
     assert kinds == ["report-csv", "report-pdf"] and len(acts) == 2
-    assert shop("clerk.clara").get("/api/pm/overview").status_code == 200
+    assert shop("clerk.clara").get("/api/pm/overview").status_code == 403  # change C10: PM and Admin only