Phase 3: VISUAL feed and M-Files drawings in the worker

Migration 0004 (VISUAL and drawing caches, go-live ignored list, resource
map, job tables, order-derived columns with provenance; work order key
includes the operation sequence). The real worker on APScheduler with
settings re-read each fire, pause, run now, advisory locks, job_runs and a
heartbeat. The visual-feed job (five VisualKit reads, COPY and MERGE cache,
suspect-batch guard, the apply in one transaction: drafts, change orders,
retire-moved, work order gone, closed and cancelled observed, projects and
units from order links, auto-release) and the fingerprint. The drawing-lookup
job (queue, budget, download on version change, sha256 into assets, decision
table, staging for rev approval, drawing-origin change orders). Clerical From
VISUAL panel, flags, rev approval, hand uploads, change-order review; Admin
Feed settings and resource map. Synthetic fixture generator and a
fixture-driven worker in CI with a Playwright scenario. Docs updated.

Verified: 3249 server tests and 13 Playwright scenarios on the docker-1 CI
stack, 76 frontend tests, doctor at 0004; one feed and one drawing run
against VISUAL DEV and the vault from the developer machine (counts in the
changelog).

Co-Authored-By: Claude Fable 5.1 <[email protected]>

server/packetstation/drawings/__init__.py

@@ -0,0 +1,17 @@
+"""Drawings from M-Files, read-only: the lookup, the decision table, the queue and the fetch into assets.
+
+Packet Station never writes to M-Files. MFilesKit enforces that in its own code; this package only calls its
+read methods (`DrawingLookup.status`, `DrawingLookup.download`).
+"""
+
+from __future__ import annotations
+
+# The packet flags this package owns. The drawing job replaces only these and keeps every other flag.
+DRAWING_FLAGS: tuple[str, ...] = (
+    "drawing_needed",
+    "rev_mismatch",
+    "not_released",
+    "not_found",
+    "lookup_failed",
+    "bad_rev",
+)