feat(worker/ai): Gemini-lärar-tier för scan/detect/allergen + shadow-capture

- Utöka GeminiAamosClient med ANALYZE_MEAL_IMAGE, READ_NUTRITION_LABEL,
  READ_EXPIRY_DATE och READ_RECEIPT (vision-prompts mot kontraktsscheman).
- Lägg till apps/worker/src/lib/shadow-capture.ts: S3/local fallback,
  imageTraining-gating, ingen PII, aldrig faila användarvägen.
- Integrera capture i scan-processorn efter lyckad runTask med consentFlags.
- Lägg till @aws-sdk/client-s3 i worker samt eval:capture-skript.
- Uppdatera eval:scan till Wikimedia Special:FilePath + redirect-following.
- Exkludera .terraform i brand-guard för att undvika false positives.
- Uppdatera gemini-test för DEDUPLICATE_INVENTORY som unsupported.

apps/worker/package.json

@@ -11,7 +11,8 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run --passWithNoTests",
     "eval": "tsx src/eval/run.ts",
-    "eval:scan": "tsx src/eval/scan-eval.ts"
+    "eval:scan": "tsx src/eval/scan-eval.ts",
+    "eval:capture": "tsx src/eval/capture-eval.ts"
   },
   "dependencies": {
     "@app/ai-contracts": "workspace:*",
@@ -25,9 +26,11 @@
     "@app/recommendation-engine": "workspace:*",
     "@app/shared-types": "workspace:*",
     "@app/subscriptions": "workspace:*",
+    "@aws-sdk/client-s3": "^3.750.0",
     "bullmq": "^6.0.0",
     "dotenv": "^16.4.0",
     "drizzle-orm": "^0.45.0",
+    "@aws-sdk/client-s3": "^3.750.0",
     "ioredis": "^6.0.0",
     "pg": "^8.13.0"
   },