Add public curator notes and U-shaped hall wall hang.

Paintings get editable curator notes with brass plates in the 3D hall, and visit order now uses the far/end wall between left and right.

Co-authored-by: Cursor <cursoragent@cursor.com>

client/src/api/client.ts

@@ -64,6 +64,14 @@ export async function loginCurator(username: string, password: string): Promise<
     body: JSON.stringify({ username, password }),
   });
   if (!res.ok) {
+    const contentType = res.headers.get('content-type') || '';
+    if (!contentType.includes('application/json')) {
+      throw new Error(
+        res.status === 401
+          ? 'Login blocked by the reverse proxy (not the gallery). Use http://localhost:5173 or fix Keenetic access.'
+          : `Login failed: HTTP ${res.status}`
+      );
+    }
     const body = await res.json().catch(() => ({}));
     throw new Error(body.error || `Login failed: ${res.status}`);
   }
@@ -436,6 +444,20 @@ export const api = {
       return res.json() as Promise<{ checked: boolean; fixed: boolean }>;
     }),
 
+  updatePaintingCuratorNotes: (id: number, curatorNotes: string) =>
+    fetch(`${API}/paintings/${id}/curator-notes`, {
+      ...fetchCredentials,
+      method: 'PATCH',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ curatorNotes }),
+    }).then(async (res) => {
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error || `Update failed: ${res.status}`);
+      }
+      return res.json() as Promise<{ curatorNotes: string }>;
+    }),
+
   getArtistDebugPortraitSearch: (id: number) =>
     fetchJson<DebugImageSearchResult>(`${API}/artists/${id}/debug-portrait-search`),