Build Seth's changes C1 to C11 (Gitea issues 1, 8, 18, 23, 24, 25, 27, 31, 32, 33, 36)

- C1 (issue 1): over target follows VISUAL ticket hours, not the timer.
- C2 (issue 24): a Q.C. reject always needs a reason; accept needs an NCR number after a reject without one.
- C3 (issue 25): an incomplete unit ITP blocks filing.
- C4 (issue 27): prints open the print dialog on the page, no new tab.
- C5 (issue 31): filing is blocked while VISUAL shows a work order open; the feed sets vclosed on VISUAL packets.
- C6 (issue 8): the data book leaves out the history pages.
- C7 (issue 18): the supervisor approves each received short; accept and filing wait for it.
- C8 (issue 23): per-department checklists, edited by the department supervisor or Admin, frozen at START.
- C9 (issue 32): Q.C. and Clerical may run the stamp check.
- C10 (issue 33): the PM screen and reports are for PS-ProjectMgmt and Admin only.
- C11 (issue 36): the Stall screen lists the packets assigned to the welder, at the supervisor's stall.

Migration 0011. Docs: PLAN (also issue 9 confirmed, issue 4 asked), POLICY, SECURITY, SCHEMA, FEED, README, CHANGELOG.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

server/packetstation/policy/principal.py

@@ -55,6 +55,10 @@ class PacketState:
     filler_set: bool = False
     qc_missing: tuple[str, ...] = ()  # the old qcMissing() list, computed by the read model
     has_qc_sent: bool = False  # qc_inspections row exists for the current stage
+    shorts_unapproved: int = 0  # open shorts plus received shorts the supervisor has not approved (C7)
+    itp_open: bool = False  # the packet's unit has an ITP that is not complete (C3)
+    ncr_required: bool = False  # a Q.C. reject since the last accept has no NCR number (C2)
+    visual_open_wos: tuple[str, ...] = ()  # the work orders the feed last saw open in VISUAL (C5)
 
 
 SYSTEM_FEED = Principal(user_id=None, system="visual-feed")