feat: photo multiselect, move/copy, trash and compact chrome

- backend: soft delete + trash (photos.deleted_at, migration 000005), GET /trash, restore, permanent delete with storage-key refcount (S3 objects removed only when no other album references them); batch endpoints photo-batch/{delete,move,copy} - metadata only, copies clone rows sharing storage keys
- frontend: Ctrl/Shift multiselect; right-panel 'Действия' as icon text rows (Открыть (просмотр), Переместить, Копировать, Удалить); drag selected photos onto rail album -> TransferDialog; /trash route; trash entry as last item in the left rail; empty right panel hidden on overview
- frontend: compact top bars (app header and viewer), compact theme switcher
- openspec: sync lightroom-workspace-ui artifacts (photos/ui-workspace specs, design #20-24, tasks 9.11-9.17)

backend/internal/app/app.go

@@ -137,6 +137,13 @@ func (s *Server) Router() *gin.Engine {
 	authed.PATCH("/photos/:id", photosHandler.Rename)
 	authed.DELETE("/photos/:id", photosHandler.Delete)
 	authed.GET("/photos/:id/download", photosHandler.Download)
+	authed.POST("/photos/:id/restore", photosHandler.Restore)
+	authed.DELETE("/photos/:id/permanent", photosHandler.PermanentDelete)
+
+	authed.POST("/photo-batch/delete", photosHandler.DeleteBatch)
+	authed.POST("/photo-batch/move", photosHandler.MoveBatch)
+	authed.POST("/photo-batch/copy", photosHandler.CopyBatch)
+	authed.GET("/trash", photosHandler.Trash)
 
 	authed.POST("/photos/:id/likes", socialHandler.AddLike)
 	authed.DELETE("/photos/:id/likes", socialHandler.RemoveLike)