Catalog rename/move (#35 #36 #37), Building... status (#11 #12), security fixes

[gi-os]

Closes #35, closes #36, closes #37, closes #11, closes #12.

All changes are in the active nested Launchpad/ tree.

Catalog management (#35 / #36 / #37)

New backend endpoint POST /api/shops/:slug/files/rename ({ path, newPath }) — path-traversal safe via safeShopPath, requires can_edit_ui, refuses overwriting an existing destination and moving a directory into itself, audit-logged as file_renamed. One endpoint powers all three features in CollectionsEditor:

• allow renaming collections #37 — pencil icon on each collection in the sidebar → inline rename (selection follows the new name)
• allow moving items between colelctions #36 — "Move to..." dropdown in the expanded item editor relocates the item folder to another collection
• allow item image name renaming #35 — "Rename" button on photo hover → inline rename in the card footer; the file extension is preserved automatically

Building... status (#11 / #12)

getContainerStatus() now returns building when the container is running but node_modules or .next/BUILD_ID don't exist yet — i.e. exactly while the container startup chain (npm install → npm run build → npm start) is still working. Pure fs check, no extra docker/network calls.

• Create notifier light that shows Building... instead of Running #11 — amber pulsing dot + "Building..." label on dashboard shop cards, Settings container control, Settings shop list, Mission Control, and StatusBadge
• Show Building... on new shop launch page to help laymans understand its not ready yet #12 — the New Shop launch page now polls the shop every 4s and shows "Building... installing & compiling — usually 2–3 minutes, the shop is not ready yet", flipping to "Shop is Ready!" with an open shop → link when it actually responds
• Start buttons are hidden while building (the container is already up)

Security & robustness fixes found during review

• Checkout schema endpoints (checkout.js): PUT /checkout/schema had no permission check — any authenticated user could rewrite any shop's checkout form. Now requires can_edit_ui. Both routes also validate the slug (^[a-zA-Z0-9_-]+$) since the schema path was built from the raw param.
• Orders wipe (orders.js): if the CSV began with blank lines, wipe wrote an empty header and corrupted the file. Now finds the first non-blank line and 400s if there is no header.
• Removed committed orders-webhook.js.bak.

Noted but NOT changed (flagging for later)

• The repo contains a stale duplicate of backend/frontend at the repo root alongside the active nested Launchpad/ tree — worth consolidating someday, too risky to touch blind.
• Shop rename in shops.js has a theoretical slug-uniqueness race (check → update without a transaction).

Verification

• node --check on all touched backend files
• Frontend vite build passes (2314 modules)
• Versions bumped: frontend + backend → 4.1.0

🤖 Generated with Claude (Fable 5 test drive)