Web review UI: bggpipe review --web (FastAPI, localhost, no build step)

One self-contained page (inline CSS/JS, system fonts, works offline):
match cards show source photos, extracted cues, and candidates with
cached-XML thumbnails (placeholder tiles until real fixtures exist);
actions are pick / manual BGG id / reject, plus a skippable editions
pass (pick or unknown). Keyboard-first: j/k navigate, 1-9 pick, r
reject, m manual, u unknown, d dismiss. Every decision writes
matches.csv through the same ReviewSession methods the TUI now shares —
the TUI remains as the no-flag fallback. unidentified.json renders as
visually distinct reshoot work-orders with dismissals persisted in
data/unidentified_dismissed.json (survives extract rebuilds). Progress
tally and a diff-ready done screen; photo serving is allowlisted to
photos/ contents; server binds 127.0.0.1 only. Layout leaves room for
a later games.json browse view.

Provenance guard: fixture generators now write STUB_FIXTURES.marker
into their cache dirs, and CLAUDE.md gains the hard rule that stub-
resolved version_ids are placeholders — upload must refuse to run
while data/bgg_cache/STUB_FIXTURES.marker exists.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

scripts/write_stub_fixtures.py

@@ -104,6 +104,10 @@ THINGS = {
 
 def main() -> None:
     FIXTURE_CACHE.mkdir(parents=True, exist_ok=True)
+    (FIXTURE_CACHE / "STUB_FIXTURES.marker").write_text(
+        "This cache contains hand-written stub XML, not real BGG "
+        "responses. Data resolved from it must not be uploaded.\n"
+    )
     for query, items in SEARCHES.items():
         key = cache_key("search", {"query": query, "type": SEARCH_TYPES})
         total = items.count("<item ")