refactor(ml): retire the Camie tagger + allowlist bulk-apply (#1189)

Heads + CCIP are the tag source and head auto-apply is the earned propagation.
The Camie tagger ran only to feed the allowlist bulk-apply (its ImagePrediction
rows had no other consumer), and the allowlist was a SECOND, un-earned auto-apply
path firing in parallel with heads on every accept — exactly the un-earned spray
the v2 pivot replaced. Retire both.

Behavior change: accepting a suggestion now applies the tag to THAT image only
(source='ml_accepted', a head-training positive) — it no longer allowlists +
fans the tag across the library via Camie. Propagation is heads' earned
auto-apply. (Loses instant cold-start propagation for booru-vocab tags; that was
un-earned and bypassed the precision gate.)

- tag_and_embed is now EMBED-ONLY (no Camie load/infer, no ImagePrediction
  writes); backfill enqueues it for images with no embedding.
- Removed: services/ml/tagger.py, apply_allowlist_tags + helpers + daily beat +
  every enqueue caller (accept/alias/merge/per-image), api/allowlist.py +
  blueprint, ImagePrediction + TagAllowlist models/tables (migration 0067),
  AllowlistTable.vue + allowlist store, the accept coverage-projection payload.
- AllowlistService gutted to accept/dismiss/undismiss/reject (the rejection store
  the rail still needs); accept returns nothing, API returns {accepted, tag_id}.
- tag merge no longer repoints/triggers the allowlist; _keep_as_alias now keys on
  ML-applied image_tag sources (incl. head_auto) instead of the allowlist.
- UI: MLBackfillCard relabelled to embedding-only; accept toast simplified;
  MaintenancePanel drops the allowlist tile.

Left for a follow-up hygiene pass (now-inert, harmless): the dead settings
columns (tagger_store_floor, tagger_model_version, suggestion_threshold_*,
video_min_tag_frames), image_record.tagger_model_version, MLThresholdSliders
trim, and the Camie model download in download_models.py.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ttrj5P7upUTueSfoJcxEqa

frontend/src/stores/allowlist.js

@@ -1,44 +0,0 @@
-import { defineStore } from 'pinia'
-import { ref } from 'vue'
-import { useApi } from '../composables/useApi.js'
-
-export const useAllowlistStore = defineStore('allowlist', () => {
-  const api = useApi()
-  const rows = ref([])
-  const loading = ref(false)
-
-  async function load() {
-    loading.value = true
-    try { rows.value = await api.get('/api/allowlist') }
-    finally { loading.value = false }
-  }
-
-  async function updateThreshold(tagId, minConfidence) {
-    await api.patch(`/api/tags/${tagId}/allowlist`, {
-      body: { min_confidence: minConfidence }
-    })
-    const r = rows.value.find(x => x.tag_id === tagId)
-    if (r) {
-      r.min_confidence = minConfidence
-      // The committed threshold changed the covered pool — refresh the row's
-      // coverage so the table stays truthful after a save.
-      try { r.coverage_count = (await coverage(tagId, minConfidence)).count }
-      catch { /* leave the stale count rather than blank it */ }
-    }
-  }
-
-  // Live "at threshold T, a sweep would cover ~N images" projection for the
-  // tuning dashboard. Returns { count, threshold }.
-  async function coverage(tagId, threshold) {
-    return api.get(`/api/tags/${tagId}/allowlist/coverage`, {
-      params: { threshold }
-    })
-  }
-
-  async function remove(tagId) {
-    await api.delete(`/api/tags/${tagId}/allowlist`)
-    rows.value = rows.value.filter(x => x.tag_id !== tagId)
-  }
-
-  return { rows, loading, load, updateThreshold, coverage, remove }
-})

frontend/src/stores/suggestions.js

@@ -113,7 +113,7 @@ export const useSuggestionsStore = defineStore('suggestions', () => {
       })
       tagId = created.id
     }
-    const res = await api.post(`/api/images/${imageId}/suggestions/accept`, {
+    await api.post(`/api/images/${imageId}/suggestions/accept`, {
       body: { tag_id: tagId }
     })
     // Only drop from THIS image's category list — if the user navigated,
@@ -121,23 +121,14 @@ export const useSuggestionsStore = defineStore('suggestions', () => {
     if (currentImageId === imageId) {
       _dropEverywhere(suggestion)
     }
-    _acceptToast('Tagged', suggestion.display_name, res)
+    _acceptToast('Tagged', suggestion.display_name)
   }
 
-  // One non-blocking toast for accept/alias. When the accept newly allowlisted
-  // the tag, surface the coverage PROJECTION (#7) so the operator sees the
-  // auto-apply reach without a blocking pre-accept preview — the apply itself
-  // runs async, hence "~N".
-  function _acceptToast(verb, displayName, res) {
-    if (res?.allowlisted) {
-      const n = res.projected_count
-      toast({
-        text: `${verb}: ${displayName} — allowlisted, auto-applying to ~${n} image${n === 1 ? '' : 's'}`,
-        type: 'success'
-      })
-    } else {
-      toast({ text: `${verb}: ${displayName}`, type: 'success' })
-    }
+  // One non-blocking toast for accept/alias. The accepted tag is applied to this
+  // image and feeds head training; head auto-apply handles propagation (earned),
+  // so there's no instant fan-out to project.
+  function _acceptToast(verb, displayName) {
+    toast({ text: `${verb}: ${displayName}`, type: 'success' })
   }
 
   async function aliasAccept(suggestion, canonicalTagId) {
@@ -149,7 +140,7 @@ export const useSuggestionsStore = defineStore('suggestions', () => {
     // reappearing unaliased. raw_name is null only for centroid hits, which
     // can't be aliased (the UI hides the action for them).
     const aliasString = suggestion.raw_name ?? suggestion.display_name
-    const res = await api.post(`/api/images/${imageId}/suggestions/alias`, {
+    await api.post(`/api/images/${imageId}/suggestions/alias`, {
       body: {
         alias_string: aliasString,
         alias_category: suggestion.category,
@@ -159,7 +150,7 @@ export const useSuggestionsStore = defineStore('suggestions', () => {
     if (currentImageId === imageId) {
       _dropEverywhere(suggestion)
     }
-    _acceptToast('Aliased & tagged', suggestion.display_name, res)
+    _acceptToast('Aliased & tagged', suggestion.display_name)
   }
 
   // Remove the alias behind an aliased suggestion (the raw prediction reverts to