feat: phase r1+r2 recovery + r3-0 swiftly api ingestion

R1 stabilization: pytest harness with transactional db fixture, smoke
+ alembic + auth + scrape + approval + swiftly tests, github actions
ci yaml. Bearer-token admin auth + signed-cookie session for family
ui mutations. Async POST /api/admin/scrape (BackgroundTasks, returns
202). Path canonicalization (no /list, /planned suffixes). DATABASE_URL
fail-fast on empty.

R2 deferred-risk spikes: live lucky california fetch (R2-A), full
email+per-voter approval click round trip with single-use enforcement
(R2-B, console email backend, sendgrid stub).

R3-0 phase 3 redesign: replaced playwright html scraper with requests
based swiftly json api client. 17 categories, ~10k products per scrape,
upsert by (source, external_id). 401 surfaces actionable token-refresh
message via ScrapeLog.error_message.

Pre-existing defects fixed: shopping_list.py syntax error blocking app
import, MealPlan.votes orphan relationship, JSONB(astext=True) invalid
kwarg, missing requests dep, calorie_target schema drift, every SQLEnum
needed values_callable, 0001 had empty downgrade(), seed had duplicate
ingredient rows.

Migrations added: 0003 grocery_item.description, 0004 family_profile.
calorie_target, 0005 grocery_item.external_id + source + composite index.

Verified: 31/31 pytest green, alembic upgrade->downgrade->upgrade clean,
frontend npm run build clean, live scrape 9,960 grocery_item rows in 36s.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

backend/app/api/profile.py

@@ -6,13 +6,14 @@ from app.schemas import (
     FamilyProfileResponse, FamilyProfileUpdate, FamilyProfileCreate,
     FamilyMemberResponse, FamilyMemberCreate
 )
+from app.security import require_session
 from uuid import UUID
 from typing import List
 
 router = APIRouter()
 
 
-@router.get("/", response_model=FamilyProfileResponse)
+@router.get("", response_model=FamilyProfileResponse)
 def get_profile(db: Session = Depends(get_db)):
     profile = db.query(FamilyProfile).first()
     if not profile:
@@ -20,7 +21,7 @@ def get_profile(db: Session = Depends(get_db)):
     return profile
 
 
-@router.put("/", response_model=FamilyProfileResponse)
+@router.put("", response_model=FamilyProfileResponse, dependencies=[Depends(require_session)])
 def update_profile(update: FamilyProfileUpdate, db: Session = Depends(get_db)):
     profile = db.query(FamilyProfile).first()
     if not profile:
@@ -43,7 +44,7 @@ def get_members(db: Session = Depends(get_db)):
     return profile.members
 
 
-@router.post("/members", response_model=FamilyMemberResponse)
+@router.post("/members", response_model=FamilyMemberResponse, dependencies=[Depends(require_session)])
 def add_member(member: FamilyMemberCreate, db: Session = Depends(get_db)):
     profile = db.query(FamilyProfile).first()
     if not profile:
@@ -69,7 +70,7 @@ def add_member(member: FamilyMemberCreate, db: Session = Depends(get_db)):
     return db_member
 
 
-@router.delete("/members/{member_id}")
+@router.delete("/members/{member_id}", dependencies=[Depends(require_session)])
 def delete_member(member_id: UUID, db: Session = Depends(get_db)):
     member = db.query(FamilyMember).filter(FamilyMember.id == member_id).first()
     if not member: