Phase 3: VISUAL feed and M-Files drawings in the worker

Migration 0004 (VISUAL and drawing caches, go-live ignored list, resource
map, job tables, order-derived columns with provenance; work order key
includes the operation sequence). The real worker on APScheduler with
settings re-read each fire, pause, run now, advisory locks, job_runs and a
heartbeat. The visual-feed job (five VisualKit reads, COPY and MERGE cache,
suspect-batch guard, the apply in one transaction: drafts, change orders,
retire-moved, work order gone, closed and cancelled observed, projects and
units from order links, auto-release) and the fingerprint. The drawing-lookup
job (queue, budget, download on version change, sha256 into assets, decision
table, staging for rev approval, drawing-origin change orders). Clerical From
VISUAL panel, flags, rev approval, hand uploads, change-order review; Admin
Feed settings and resource map. Synthetic fixture generator and a
fixture-driven worker in CI with a Playwright scenario. Docs updated.

Verified: 3249 server tests and 13 Playwright scenarios on the docker-1 CI
stack, 76 frontend tests, doctor at 0004; one feed and one drawing run
against VISUAL DEV and the vault from the developer machine (counts in the
changelog).

Co-Authored-By: Claude Fable 5.1 <[email protected]>

frontend/src/screens/admin/AdminPage.tsx

@@ -5,8 +5,9 @@ import type { AdLookup, AdRefreshResult, AdminUser, GroupRow, PinState } from ".
 import { useAuth } from "../../auth/useAuth";
 import { errorText, fmtTime } from "../../lib/format";
 import { useLoad, type Load } from "../../lib/useLoad";
+import { FeedTab, ResourcesTab } from "./FeedTabs";
 
-type Tab = "users" | "lookup" | "devices" | "groups" | "attempts";
+type Tab = "users" | "lookup" | "devices" | "groups" | "attempts" | "feed" | "resources";
 
 const TABS: ReadonlyArray<{ id: Tab; label: string }> = [
   { id: "users", label: "Users" },
@@ -14,6 +15,8 @@ const TABS: ReadonlyArray<{ id: Tab; label: string }> = [
   { id: "devices", label: "Devices" },
   { id: "groups", label: "Group map" },
   { id: "attempts", label: "Sign-in attempts" },
+  { id: "feed", label: "Feed" },
+  { id: "resources", label: "VISUAL resources" },
 ];
 
 const ROLES_NOTE = "Roles come from AD groups. Ask IT to change them.";
@@ -696,6 +699,8 @@ export function AdminPage() {
         {tab === "devices" ? <DevicesTab /> : null}
         {tab === "groups" ? <GroupsTab /> : null}
         {tab === "attempts" ? <AttemptsTab /> : null}
+        {tab === "feed" ? <FeedTab /> : null}
+        {tab === "resources" ? <ResourcesTab /> : null}
       </div>
     </>
   );