Add story-graph narrative system (campaigns, editors, runtime)

Introduce the narrative layer as a directed story-flow graph: an authored
campaign a player walks node by node, replacing the interim slot/chapter model.

Schema (migrations 015-021):
- mysteries, global NPC templates + named poses, per-user playthroughs
- story_nodes, terminals, utterances (the flow graph and dialogue trees)
- clean cutover: retire slot cutscenes/chapters/seen_dialogue

Runtime:
- New Game creates a playthrough bound to the JWT identity (dev test-user fallback)
- advance() walks the graph cutscene -> dialogue -> level -> ..., auto-skipping gates
- branching dialogue: player choices route out through node terminals

Admin authoring:
- NPC editor: upload named poses to the gupi MinIO bucket
- mystery graph editor: vertical node canvas, wiring, entrypoint, delete-by-click
- dialogue crafter: utterance tree, Tab to add child, 1/2 speaker, undo

Content authored via the manifest importer / admin panel and seeded for Glass
Harbour. MinIO added to the dev stack; dev container runs in development mode.

Also includes a folder-widget simplification (removes open/close) and a
resolveUserId auth helper.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docker-compose.dev.yml

@@ -30,12 +30,52 @@ services:
       JWT_SECRET: ${JWT_SECRET:-osint-local-dev-secret}
       LEVEL_EDITING_ENABLED: "true"
       MAX_DOCUMENT_BYTES: 26214400
+      S3_ENDPOINT: http://minio:9000
+      S3_REGION: us-east-1
+      S3_ACCESS_KEY: gupi
+      S3_SECRET_KEY: gupi_secret
+      S3_BUCKET: gupi
+      S3_FORCE_PATH_STYLE: "true"
     ports:
       - "8787:8787"
     depends_on:
       db:
         condition: service_healthy
-    command: ["sh", "-c", "npm run migrate:up && npm start"]
+      createbuckets:
+        condition: service_completed_successfully
+    # Run directly (not `npm start`, which forces NODE_ENV=production) so the
+    # NODE_ENV=development above applies and dev conveniences like the admin-session
+    # route are available.
+    command: ["sh", "-c", "npm run migrate:up && npx tsx server/index.ts"]
+
+  minio:
+    image: minio/minio:latest
+    container_name: osint-board-minio
+    restart: unless-stopped
+    command: server /data --console-address ":9001"
+    environment:
+      MINIO_ROOT_USER: gupi
+      MINIO_ROOT_PASSWORD: gupi_secret
+    ports:
+      - "9000:9000"   # S3 API
+      - "9001:9001"   # web console
+    volumes:
+      - osint_minio_data:/data
+
+  # One-shot: wait for MinIO, then ensure the gupi bucket exists. Assets are
+  # served through the app's /api/assets proxy, so the bucket stays private.
+  createbuckets:
+    image: minio/mc:latest
+    container_name: osint-board-createbuckets
+    depends_on:
+      - minio
+    entrypoint: >
+      /bin/sh -c "
+      until mc alias set gupi http://minio:9000 gupi gupi_secret; do echo 'waiting for minio...'; sleep 1; done;
+      mc mb --ignore-existing gupi/gupi;
+      echo 'gupi bucket ready';
+      "
 
 volumes:
   osint_postgres_data:
+  osint_minio_data: