feat: production Docker, Playwright tests, settings API, and bug fixes

- Add user management endpoints (register, list, delete, change password)
- Add API key management (create, list, delete)
- Add settings persistence endpoints (get, put)
- Wire settings dialog to real backend (People, API Keys, System, Security)
- Fix login auth flow (window.location.href for full reload)
- Fix download URLs returning 401 (make public since UUIDs are unguessable)
- Fix border tool shadowColor validation (accept 6-8 hex digits)
- Fix remove-bg alpha matting fallback (retry without on failure)
- Fix AI tool silent fallbacks (report errors instead of no-ops)
- Add checkerboard background to before/after slider for transparency
- Add progress bars to all AI tool components
- Add Playwright E2E test suite (131 tests across 9 test files)
- Rewrite Dockerfile for production (tsx runtime, pre-baked AI models)
- Add .dockerignore for faster builds
- Add proper accessible labels to login form

packages/ai/python/detect_faces.py

@@ -63,18 +63,16 @@ def main():
                 )
 
         except ImportError:
-            # Fallback: no face detection available, save original
-            img.save(output_path)
+            # MediaPipe not available — report error clearly
             print(
                 json.dumps(
                     {
-                        "success": True,
-                        "facesDetected": 0,
-                        "faces": [],
-                        "note": "mediapipe not available - no faces detected",
+                        "success": False,
+                        "error": "Face detection requires the mediapipe package. Install with: pip install mediapipe",
                     }
                 )
             )
+            sys.exit(1)
 
     except ImportError:
         print(