feat(collector): review collector skeleton — apps/collector, its own Komodo stack on the reviewer's host

The far end of the Car Wash review outbox (wiki/concepts/vision-review-outbox.md): a small
Fastify + SQLite service in the monorepo (shares the payload contract and the class
vocabulary via @parking/shared), delivered to art-docker-station by its own stack so
nothing booth-side lands there and nothing of it on a booth.

- POST /ingest: bearer token per booth (constant-time), X-Booth-Id must match, multipart
  meta + JPEG (magic checked, 2 MB cap), meta validated against the contract, idempotent on
  the item id; crop stored at crops/<booth>/<item>.jpg on the volume + one items row.
- /review + /api/*: the reviewer's screen served by the process (Basic auth, one login):
  one pending crop at a time, operator's pick and camera's pick beside it, one button/key
  per vocabulary class + unusable + skip; stats per booth and per hashed operator
  (agree / disagree / unusable — disagree = the reviewer's class is outside the operator's
  category).
- GET /export/labels.csv: reviewed usable rows for training; formula-leading cells are
  neutralised (booth-supplied names). Crops stay on the volume for the trainer on the host.
- Booth payload now carries operatorCategory.classes so the comparison needs no site setup.
- Delivery: apps/collector/Dockerfile (monorepo context), docker-compose.collector.yml
  (bind to the overlay IP; commented `trainer` profile seam for the GPU), a third build
  step in build-images.yml, a `wash-collector` stack in komodo/resources.toml with one
  secret per booth referenced from both the collector's token list and the booth's own
  stack (park-2 lines templated, commented, DNS name for the URL).
- Tests: app.test.ts (ingest ok/dup/refusals, review + stats + export, config). Image
  built and smoke-tested locally (health, ingest, duplicate, auth, verdict, export).

Claude-Session: https://claude.ai/code/session_01FWncR69HgGPuei1dLrW3cU

wiki/log.md

@@ -3110,3 +3110,14 @@ plate blurred in place, pseudonymous booth id + keyed operator hash, multipart P
 per-booth bearer, backoff, permanent rejections, void/expiry abandon, image dropped once sent);
 enqueue off the intake path in `createOrder`; `/api/carwash/review/status` + a Setup line; env +
 compose. New concept page [[vision-review-outbox]]; [[venue-modules]] As built; index.
+
+## [2026-09-06] ingest | Review collector skeleton — apps/collector + its own Komodo stack
+Built `apps/collector` (Fastify + SQLite, shares the contract via @parking/shared): `POST /ingest`
+(bearer per booth, X-Booth-Id must match, multipart meta+JPEG validated, idempotent on item id,
+crop on the volume), the reviewer's screen served by the process (Basic auth; one button/key per
+class + unusable + skip; per-operator agree/disagree/unusable stats), `GET /export/labels.csv`.
+Delivery: `apps/collector/Dockerfile` (monorepo context), `docker-compose.collector.yml` (bind to
+the overlay address; commented `trainer` profile seam for the GPU), a third build step in
+build-images.yml, and a `wash-collector` stack on `art-docker-station` in komodo/resources.toml
+(secret refs to fill). Booth payload now carries `operatorCategory.classes`. Tests: app.test.ts.
+Updated [[vision-review-outbox]], [[fleet-deployment-komodo]].