merge(dev): reconcile photo editor security and upstream changes

- Reconcile conflict resolution in routes/editor_agent_routes.py and src/editor_agent_model.py
- Enforce strict server-authorized endpoint resolution and reject client URL overrides
- Enforce bearer-token privilege separation: delegated API tokens are capped at non-admin scope per src/tool_security.py and cannot inspect private base URLs or probe metadata
- Preserve chat-scope authorization, missing-session 401 rejection, and owner-scoped browser bridge/SSE queues
- Preserve administrator-disabled-tool denylist enforcement introduced by PR #6357
- Fix mobile toolbar flyout hit-testing and stacking context trapping on viewports <= 700px via scoped elevation and mask suppression
- Stabilize project recovery test fixture by awaiting document draft quiescence prior to baseline capture

static/js/editor/build/toolbar.js

@@ -109,6 +109,8 @@ export function buildToolbar({ currentTool, onSelectTool, onClearSelection }) {
 
   const closeAllFlyouts = () => {
     toolbar.querySelectorAll('.ge-tool-slot.open').forEach(s => s.classList.remove('open'));
+    toolbar.classList.remove('ge-flyout-open');
+    toolbar.closest('.ge-toolbar-wrap')?.classList.remove('ge-flyout-open');
   };
 
   const openFlyout = (slotEl, face) => {
@@ -116,6 +118,8 @@ export function buildToolbar({ currentTool, onSelectTool, onClearSelection }) {
     closeAllFlyouts();
     if (isOpen) return;
     slotEl.classList.add('open');
+    toolbar.classList.add('ge-flyout-open');
+    toolbar.closest('.ge-toolbar-wrap')?.classList.add('ge-flyout-open');
     const flyout = slotEl.querySelector('.ge-tool-flyout');
     if (!flyout) return;
     const r = face.getBoundingClientRect();