feat(collector): review collector skeleton — apps/collector, its own Komodo stack on the reviewer's host

The far end of the Car Wash review outbox (wiki/concepts/vision-review-outbox.md): a small
Fastify + SQLite service in the monorepo (shares the payload contract and the class
vocabulary via @parking/shared), delivered to art-docker-station by its own stack so
nothing booth-side lands there and nothing of it on a booth.

- POST /ingest: bearer token per booth (constant-time), X-Booth-Id must match, multipart
  meta + JPEG (magic checked, 2 MB cap), meta validated against the contract, idempotent on
  the item id; crop stored at crops/<booth>/<item>.jpg on the volume + one items row.
- /review + /api/*: the reviewer's screen served by the process (Basic auth, one login):
  one pending crop at a time, operator's pick and camera's pick beside it, one button/key
  per vocabulary class + unusable + skip; stats per booth and per hashed operator
  (agree / disagree / unusable — disagree = the reviewer's class is outside the operator's
  category).
- GET /export/labels.csv: reviewed usable rows for training; formula-leading cells are
  neutralised (booth-supplied names). Crops stay on the volume for the trainer on the host.
- Booth payload now carries operatorCategory.classes so the comparison needs no site setup.
- Delivery: apps/collector/Dockerfile (monorepo context), docker-compose.collector.yml
  (bind to the overlay IP; commented `trainer` profile seam for the GPU), a third build
  step in build-images.yml, a `wash-collector` stack in komodo/resources.toml with one
  secret per booth referenced from both the collector's token list and the booth's own
  stack (park-2 lines templated, commented, DNS name for the URL).
- Tests: app.test.ts (ingest ok/dup/refusals, review + stats + export, config). Image
  built and smoke-tested locally (health, ingest, duplicate, auth, verdict, export).

Claude-Session: https://claude.ai/code/session_01FWncR69HgGPuei1dLrW3cU

apps/server/Dockerfile

@@ -15,6 +15,7 @@ COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json ./
 COPY apps/server/package.json     apps/server/
 COPY apps/web/package.json        apps/web/
 COPY apps/vision/package.json     apps/vision/
+COPY apps/collector/package.json  apps/collector/
 COPY packages/db/package.json     packages/db/
 COPY packages/devices/package.json packages/devices/
 COPY packages/shared/package.json packages/shared/

apps/server/src/modules/carwash/review-outbox.test.ts

@@ -83,7 +83,7 @@ describe("queue + drain", () => {
 
   const cfg = { url: "https://collector.overlay/ingest", token: "secret-1", boothId: "booth-7", intervalSec: 60 };
   const read = { bodyType: "car" as const, confidence: 0.86, snapshotId: "snap-1", box: CAR, plateBox: PLATE };
-  const item = { orderId: "o-1", createdAt: "2026-09-06T10:00:00.000Z", createdBy: "lavazhier", categoryId: "car", categoryName: "Vetura", serviceName: "Standard", visionCategoryId: "car", downgraded: false };
+  const item = { orderId: "o-1", createdAt: "2026-09-06T10:00:00.000Z", createdBy: "lavazhier", categoryId: "car", categoryName: "Vetura", categoryClasses: ["car", "sedan"], serviceName: "Standard", visionCategoryId: "car", downgraded: false };
 
   async function seed(): Promise<void> {
     db.insert(snapshots).values({ id: "snap-1", direction: "entry", identity: "T-1", contentType: "image/jpeg", bytes: await frame(), capturedAt: new Date().toISOString() }).run();
@@ -105,7 +105,7 @@ describe("queue + drain", () => {
     const row = db.select().from(carwashReviewOutbox).all()[0]!;
     expect(row.status).toBe("queued");
     expect(row.image!.length).toBeGreaterThan(500);
-    expect(row.payload).toMatchObject({ v: 1, booth: "booth-7", order: "o-1", operatorCategory: { id: "car", name: "Vetura" }, vision: { class: "car", confidence: 0.86 }, downgraded: false, image: { plateBlurred: true } });
+    expect(row.payload).toMatchObject({ v: 1, booth: "booth-7", order: "o-1", operatorCategory: { id: "car", name: "Vetura", classes: ["car", "sedan"] }, vision: { class: "car", confidence: 0.86 }, downgraded: false, image: { plateBlurred: true } });
     expect(JSON.stringify(row.payload)).not.toContain("lavazhier");
 
     expect(await ob.drain()).toEqual({ sent: 1, failed: 0, deferred: 0 });

apps/server/src/modules/carwash/review-outbox.ts

@@ -66,6 +66,9 @@ export interface ReviewItemInput {
   readonly createdBy: string;
   readonly categoryId: string;
   readonly categoryName: string;
+  /** The vision classes the chosen category covers at this site (its mapping) — lets the
+   *  reviewer's class be judged against the operator's category without the site's setup. */
+  readonly categoryClasses: readonly string[];
   readonly serviceName: string;
   readonly visionCategoryId: string | null;
   readonly downgraded: boolean;
@@ -185,7 +188,7 @@ export class ReviewOutbox {
         order: item.orderId,
         at: item.createdAt,
         operator: operatorRef(this.#cfg.boothId, item.createdBy),
-        operatorCategory: { id: item.categoryId, name: item.categoryName },
+        operatorCategory: { id: item.categoryId, name: item.categoryName, classes: [...item.categoryClasses] },
         service: item.serviceName,
         vision: { class: read.bodyType, confidence: read.confidence, categoryId: item.visionCategoryId },
         downgraded: item.downgraded,

apps/server/src/modules/carwash/service.ts

@@ -535,6 +535,7 @@ export class CarwashService {
           createdBy: input.actor,
           categoryId: category.id,
           categoryName: category.name,
+          categoryClasses: category.visionClasses,
           serviceName: service.name,
           visionCategoryId: visionCategory?.id ?? null,
           downgraded: downgradeEventId != null,