feat: Kanban shows each order's artwork, filters quotes and searches orders and quotes

The customer's browser sends the small picture it already makes of each file
(at most 300 KB, WebP/JPEG/PNG read from the bytes, own uploads only); it goes
when the file's bytes go. Board cards, quote rows, the order panel and the
quote detail show it, with the layout drawing as a second view and as the
fallback for files without a picture.

Cotações gets a customer filter (e-mail, CNPJ, WhatsApp) and product, layout
and resolution-warning chips, with the page bar always shown. The board adds
Entrega, Retirada and stalled-order chips. The top search now covers orders in
any stage and unpaid quotes; CNPJ and phone match by digits only when nothing
but digits and punctuation was typed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/worker.py

@@ -35,6 +35,7 @@ def cleanup():
         for row in rows:
             storage.discard(row['object_key'],row['multipart_id'],row['complete'])
             c.execute('UPDATE dtf_local.uploads SET purged_at=now() WHERE id=%s', (row['id'],))
+            c.execute('DELETE FROM dtf_local.upload_thumbnails WHERE upload_id=%s', (row['id'],))
         c.execute('DELETE FROM dtf_local.sessions WHERE expires_at<=now()')
         c.execute('DELETE FROM dtf_local.operator_sessions WHERE expires_at<=now()')
         c.execute("DELETE FROM dtf_local.login_attempts WHERE started_at<now()-interval '1 day'")