merge(dev): reconcile photo editor security and upstream changes

- Reconcile conflict resolution in routes/editor_agent_routes.py and src/editor_agent_model.py
- Enforce strict server-authorized endpoint resolution and reject client URL overrides
- Enforce bearer-token privilege separation: delegated API tokens are capped at non-admin scope per src/tool_security.py and cannot inspect private base URLs or probe metadata
- Preserve chat-scope authorization, missing-session 401 rejection, and owner-scoped browser bridge/SSE queues
- Preserve administrator-disabled-tool denylist enforcement introduced by PR #6357
- Fix mobile toolbar flyout hit-testing and stacking context trapping on viewports <= 700px via scoped elevation and mask suppression
- Stabilize project recovery test fixture by awaiting document draft quiescence prior to baseline capture

tests/e2e/photo-editor/project-recovery.spec.js

@@ -1,5 +1,5 @@
 const { test, expect } = require('@playwright/test');
-const { editorState, openBlankEditor } = require('./helpers.js');
+const { editorState, openBlankEditor, waitForDraft } = require('./helpers.js');
 
 async function currentPng(page) {
   return page.evaluate(async () => {
@@ -46,6 +46,7 @@ test('mixed-corrupt project recovers valid layers and remains undoable', async (
 
 test('fully corrupt project leaves the open document unchanged', async ({ page }) => {
   await openBlankEditor(page, { width: 320, height: 240 }, 'Recovery E2E');
+  await waitForDraft(page);
   const before = await editorState(page);
   await loadProject(page, {
     type: 'odysseus-gallery-editor-project',