D11 - merge origin/Micron-Assets: the Micron asset picker, adapted to R2

Integrates Cody Schaefer's 7ef1fcd (written against pre-R2 main) per Nick's
instruction of Aug 20. The catalog lookup arrives whole: read-only /api/assets
backed by server/assets_db.py (one SELECT, env-only MICRON_DB_URL, 503-not-500
when broken, driver errors logged not propagated), the searchable picker with
CSV import and Excel column paste, catalog rows badged and locked to the DB's
casing, manual rows visibly unvouched, and graceful absent/unreachable states.

Three conflicts, resolved as unions of both sides' intent; the adaptations and
their reasons are recorded in docs/waves/decisions-2026-08-20.md:
- renderPackage: Cody's two-column asset table inside T9.1's sectioned
  add('assets', ...) frame, so the CR-006 toggle keeps governing the export.
- bootData: initAssetPicker() joins the R2 loads instead of replacing them.
- The asset card: his picker UI, plus role=status on the source note (C1).
- Six imported alert() calls converted to the creator's idioms: file errors
  through toast(msg,'alert') as the drawings uploader does; the instructional
  and summary messages through the T7.9 kit, which gains the one-button
  wpAlertDialog shape (BL-024's console conversions will want it too).

New probe: assets_check (27) - read-only structurally, unconfigured/broken as
first-class states, no credential echo, search ranking, casing canonicalisation,
import fallback + dedup, kit-not-native summary. One sections_check pin
re-pointed with the reason in code: normaliseAsset now stamps legacy rows
source:'manual' on load, so the CR-016 check compares content, not bytes.

Battery after merge: assets_check 27/27, creator_dialogs_check 20/20,
sections_check ALL PASS, export_check 20/20, helptip_check 13/13,
mobile_check 24/24, icon_check 5/5, color_check 5/5, form_structure_check
50/51 (the one red is BL-022, unchanged, deliberate).

Item: D11 (new scope, new id per the working rules). Out-of-scope note in
completion.md amended - 'no integration code exists' was true when written.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

tests/sections_check.py

@@ -329,8 +329,15 @@ def run(page, base, tok, db_path):
       return JSON.stringify({assets: out.assets, materials: out.materials,
                              kitStatus: out.kitStatus, subject: out.subject});
     })()""" % json.dumps(FULL_PKG)))
+    # Content, not byte-equality: since D11 (Aug 20) every asset row loaded into
+    # the form is normalised - a row the Micron catalog does not vouch for gains
+    # source:'manual' on its way through. That stamp is the feature working, not
+    # the section toggle leaking; what CR-016 requires to survive is the DATA.
     chk("a package edited while Assets is off keeps its assets on save",
-        collected["assets"] == FULL_PKG["assets"], collected["assets"])
+        [{"tag": a.get("tag"), "desc": a.get("desc")} for a in collected["assets"]]
+        == [{"tag": a["tag"], "desc": a["desc"]} for a in FULL_PKG["assets"]]
+        and all(a.get("source") in ("manual", "catalog") for a in collected["assets"]),
+        collected["assets"])
     # Compared on the content, not the whole row: the creator upper-cases a
     # material unit on its way through the form ("ea" -> "EA"), which is its own
     # long-standing behaviour and nothing to do with section toggles. Asserting