Initial commit: PESCO NCR system

Complete Non-Conformance Report system replacing the PowerApps/SharePoint
prototype: FastAPI + SQLAlchemy 2 (async) + Alembic + MySQL 8 backend,
React 18 + Vite + TypeScript + MUI frontend, Entra ID auth (MSAL / JWKS,
group-gated), Microsoft Graph delegated Mail.Send notifications (OBO),
six-stage workflow state machine with server-side enforcement, atomic
NCR-YYYY-NNNN numbering, attachments with camera capture, immutable
field-level audit trail, admin reopen, reports + CSV export, WeasyPrint
PDF traveler, Power BI reporting views + read-only DB user, documented
VISUAL ERP job-lookup stub, pytest suite (26 tests), docker-compose
deployment.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

backend/app/routers/lookups.py

@@ -0,0 +1,44 @@
+from fastapi import APIRouter, Depends
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.auth.deps import CurrentUser, get_current_user
+from app.database import get_db
+from app.models import Department, DeviationCategory
+from app.schemas.lookup import LookupsOut, NamedLookupOut
+
+router = APIRouter(tags=["lookups"])
+
+
+@router.get("/lookups", response_model=LookupsOut)
+async def get_lookups(
+    _: CurrentUser = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db),
+) -> LookupsOut:
+    """Active departments and deviation categories for form dropdowns."""
+    departments = (
+        (
+            await db.execute(
+                select(Department)
+                .where(Department.is_active.is_(True))
+                .order_by(Department.name)
+            )
+        )
+        .scalars()
+        .all()
+    )
+    categories = (
+        (
+            await db.execute(
+                select(DeviationCategory)
+                .where(DeviationCategory.is_active.is_(True))
+                .order_by(DeviationCategory.name)
+            )
+        )
+        .scalars()
+        .all()
+    )
+    return LookupsOut(
+        departments=[NamedLookupOut.model_validate(d) for d in departments],
+        deviation_categories=[NamedLookupOut.model_validate(c) for c in categories],
+    )