feat: project cover art with AI generation, branding rename, RBAC fix, computation graph

- Add DALL-E cover art generation for projects (Azure OpenAI + standard OpenAI)
- CoverArtSection component with generate/upload/remove/focus-point controls
- Client-side image compression (10MB input → WebP/JPEG, max 1920px)
- DALL-E settings in admin panel (deployment, endpoint, API key)
- MCP assistant tools for cover art (generate_project_cover, remove_project_cover)
- Rename "Planarchy" → "plANARCHY" across all UI-facing text (13 files)
- Fix hardcoded canEdit={true} on project detail page — now checks user role
- Computation graph visualization (2D/3D) for calculation rules
- OG image and OpenGraph metadata

Co-Authored-By: claude-flow <ruv@ruv.net>

packages/api/src/router/settings.ts

@@ -42,6 +42,10 @@ export const settingsRouter = createTRPCRouter({
       anonymizationEnabled: settings?.anonymizationEnabled ?? false,
       anonymizationDomain: settings?.anonymizationDomain ?? "superhartmut.de",
       anonymizationMode: settings?.anonymizationMode ?? "global",
+      // DALL-E
+      azureDalleDeployment: settings?.azureDalleDeployment ?? null,
+      azureDalleEndpoint: settings?.azureDalleEndpoint ?? null,
+      hasDalleApiKey: !!settings?.azureDalleApiKey,
       // Vacation defaults
       vacationDefaultDays: settings?.vacationDefaultDays ?? 28,
     };
@@ -84,6 +88,10 @@ export const settingsRouter = createTRPCRouter({
         anonymizationDomain: z.string().trim().min(1).optional(),
         anonymizationSeed: z.string().trim().min(1).optional().or(z.literal("")),
         anonymizationMode: z.enum(["global"]).optional(),
+        // DALL-E image generation
+        azureDalleDeployment: z.string().optional(),
+        azureDalleEndpoint: z.string().url().optional().or(z.literal("")),
+        azureDalleApiKey: z.string().optional(),
         // Vacation
         vacationDefaultDays: z.number().int().min(0).max(365).optional(),
       }),
@@ -127,6 +135,13 @@ export const settingsRouter = createTRPCRouter({
         data.anonymizationMode = input.anonymizationMode;
         data.anonymizationAliases = null;
       }
+      // DALL-E
+      if (input.azureDalleDeployment !== undefined)
+        data.azureDalleDeployment = input.azureDalleDeployment || null;
+      if (input.azureDalleEndpoint !== undefined)
+        data.azureDalleEndpoint = input.azureDalleEndpoint || null;
+      if (input.azureDalleApiKey !== undefined)
+        data.azureDalleApiKey = input.azureDalleApiKey || null;
       // Vacation
       if (input.vacationDefaultDays !== undefined) data.vacationDefaultDays = input.vacationDefaultDays;