refactor(section-d): frontend API client type safety audit

All 19 api/*.ts files already used import api from './client' (X-Tenant-ID
guaranteed). Fixed missing type generics and any usage in 10 files:
- worker.ts: args: any[] → unknown[]
- imports.ts, notifications.ts: add response type generics
- renderTemplates.ts: add typed generics on 6 calls
- materials.ts, cad.ts: type previously untyped api calls
- products.ts: ProductCadUploadResponse interface, typed generics
- uploads.ts: StepUploadResponse interface
- billing.ts, orders.ts: <Blob> on download calls

Zero bare axios usage, zero as any in API layer.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/api/worker.ts

@@ -94,7 +94,7 @@ export function renderLogStreamUrl(orderLineId: string): string {
 export interface QueueTask {
   task_id: string
   task_name: string
-  args: any[]
+  args: unknown[]
   argsrepr: string
   status: 'pending' | 'active' | 'reserved'
   worker?: string