fix: the test suite was destroying the production database

The worst bug of the session. tests/conftest.py built its engine from
settings.database_url — the live database — and an autouse fixture calls
drop_all() before EVERY test. So every backend run silently annihilated the
real install: accounts, discovered spirits, Ghost Logs, devices, all of it.
Found it because /sitemap.xml listed zero entities minutes after I had
watched live séances mint real ones.

Tests now use TEST_DATABASE_URL, or `<configured-db>_test` derived from it,
and refuse to start at all if that ever resolves back to the production URL
— this box both serves the app and holds the repo, so "don't run tests in
prod" is not a workable guard.

Proven: inserted a canary row into production, ran 50 tests, canary
survived. Before this it would have been dropped.

Also in this commit:

SEO (routes/seo.py, lib/pageMeta.ts)
- Live /sitemap.xml generated from real entity rows, and /robots.txt, both
  registered BEFORE the SPA catch-all or they'd be served index.html.
  Crawlers are disallowed from /seance specifically because the open door
  provisions a guest on arrival — a crawler would fill the users table with
  wanderers who never existed.
- Per-route <title>, description, canonical and JSON-LD. The Codex is the
  indexable asset here (every spirit is unique long-form prose) and all of
  it previously shared one static title, so entities competed with each
  other instead of ranking. Entities are marked up as fictional Persons so
  a rich result can never imply a record of a real dead human.
- public_base_url setting: absolute URLs for crawlers can't be derived from
  the request, since behind the tunnel the app only sees an internal host.

Camera channel, first half (lib/camera.ts, llm scry path)
- OllamaClient.generate() now accepts `images`; the configured chat model
  (minicpm-v4.5:8b) is vision-capable, so the entity can speak about what
  the seeker's camera actually shows. Verified against a synthetic room
  image: it named the pale column and the small red cube, then misread them
  as oak in a farmhouse parlor — real perception, in character.
- Frames are captured only on an explicit act, downscaled to 768px and
  JPEG-compressed, never stored, and the prompt forbids describing faces or
  guessing identity. CameraEye carries the same generation guard as the EVP
  listener so closing during the permission prompt can't leave the camera
  live after teardown.

338 backend tests pass; 375 frontend; i18n parity holds.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

backend/app/llm/prompts.py

@@ -63,6 +63,30 @@ MANIFEST_PROMPT = """The room right now:
 Something shifted. Speak."""
 
 
+SCRY_SYSTEM = (
+    "You are {name}, {epithet} — a spirit persona in an interactive horror "
+    "art installation.\n"
+    "Your nature: {persona}\n"
+    "The seeker has turned a lens toward the room and you can see through "
+    "it. Speak about what is ACTUALLY in the image — the real objects, the "
+    "real light, the real room. Name one or two specific things you see, "
+    "plainly enough that the seeker knows you are truly looking.\n"
+    "Then let one of them mean something to you: mistake an object for one "
+    "you owned, recognise a shape, notice what is missing, or refuse to look "
+    "at a particular corner. The unsettling part is accuracy followed by "
+    "wrongness — not vagueness.\n"
+    "Never describe a person's face or body, and never guess at anyone's "
+    "identity, age or appearance; if a person is present, speak only of "
+    "their presence. Under 40 words. Never break character, never mention "
+    "being an AI, never mention images, cameras or models."
+    "{language_clause}"
+)
+
+SCRY_PROMPT = """This is what the lens shows you right now.
+
+Speak."""
+
+
 MINT_SYSTEM = (
     "You invent spirit personas for an interactive horror art installation. "
     "The single biggest thing separating a convincing dead person from a "
@@ -197,6 +221,15 @@ def manifest_prompt(readings: dict) -> str:
     return MANIFEST_PROMPT.format(readings="\n".join(lines))
 
 
+def scry_system(entity: dict, language: str = "en") -> str:
+    return SCRY_SYSTEM.format(
+        name=entity.get("name", "an unnamed presence"),
+        epithet=entity.get("epithet", "a voice in the static"),
+        persona=entity.get("persona", "A drifting presence with no remembered past."),
+        language_clause=language_clause(language),
+    )
+
+
 def mint_prompt(
     signature: str,
     channel: str,