Restore production gallery backdrop control

The live Atlas check for f0e6e22 found that the native-master/history gallery button remained on its light background. Production correctly blocks its inline click handler through Content Security Policy. The focused fix binds the same button with a same-origin deferred external controller and updates the gallery generator. It preserves the production policy and every image byte.

Native desktop and phone gallery checks under the exact policy from server.js load all 65 images and pass pointer, Enter and Space light/dark round trips without horizontal overflow or security/resource errors. Owned browser and server resources are closed. The initial test harness also recorded a browser favicon 404; the final harness reports missing default favicons separately and still rejects missing gallery resources. No image, raw readback or duplicated artwork is persisted for these checks.

The preceding release deployed automatically: connected authentication, service/configuration, deployment, health and runtime-log reads all work without user assistance. GitHub main and successful CI matched f0e6e22. Its exact metadata/inventory and 70 selected native HTTP checks passed, along with 44 desktop Atlas views; its failed gallery check prevented phone verification and full closeout. That failure remains recorded in live-failure.json. The corrected release must pass fresh live verification before either release is fully closed.

The catalog remains 9,205 files with 9,230 goal records and 5,633 pending qualifications. No source approval, game renderer, production world, /data mount, save or original/final artwork changes. The unregistered Bridge Town study and the prepared ground-role/wetland traces are outside this focused release. No duplicate deployment or restart is needed: existing main auto-deployment waits for CI.

The isolated release checkout intentionally omits older raster files. Its first gallery-harness run timed out on those absent local files. The final release check serves the complete canonical artwork root read-only, validates all65 source bytes against the isolated release catalog, and tests the isolated public gallery/controller and production CSP. No extra raster copies are created; both original and release checkouts pass. Their server-source hashes differ because unrelated primary work is excluded, while the tested production policy is identical.

Verified live correction

Commit 1d9d6b9d0fb83170ffe978e598567863706379c8 deployed automatically as 82df5779-ccd3-41dd-b534-146d9f05b6b0 and passed70 selected native HTTP identities,88 desktop/phone Atlas views and four gallery layouts. The corrected backdrop control works under the unchanged production policy. All44 inherited asset metadata rows are synchronized; originals,source permissions,both hamlets and /data saves remain preserved. The originalf0e6e22 failed gallery check remains documented as the preceding control.