Plugin framework maturation, reports overhaul, theming, and USB frontend repair

Framework:
- Per-plugin Alembic migration chains (ADR-008): every bundled plugin
  carries its own chain with a stamp-only anchor at the ownership cutover;
  new plugin schema lands in plugins/<name>/migrations/, never the core
  chain. Deploys add flask plugin upgrade-all. Fixed a latent bug in the
  shared alembic template (engine URL resolution) and taught the metadata
  filter to include FK-referenced core tables.
- Frontend plugin route gating (ADR-009): plugin routes carry meta.plugin;
  a disabled plugin's pages redirect to the dashboard via a cached,
  fail-open check against the new public GET /api/plugins/enabled.
- get_reports() plugin hook (contract 0.5.0 -> 0.6.0): plugins contribute
  report cards; warranty and toner cards moved off the hardcoded list.

Reports:
- Hub grouped by category with search; inline reports render at the top,
  are URL-backed (?report=id, back-button and deep links work), expose
  their server-side filter params as controls, and export CSV. Warranty
  and Toner pages gained CSV export.
- Deleted the dead legacy Warranty Status report (always-zero buckets
  from a retired column).

Theming and fonts:
- Inter (variable) bundled locally via @fontsource, replacing the Google
  Fonts Roboto import - air-gapped installs now render correctly; tables
  use tabular numerals.
- Optional brand_primary_dark_color, brand_accent_color,
  brand_sidebar_color settings applied to CSS vars at bootstrap.

USB frontend repair (views were reading a dead legacy shape):
- List/detail/form and the employee profile USB panels remapped to the
  real API shape (device_id/device_desc/checkinoutlog); employee panels
  now use /usb/checkouts endpoints; external-mode /usb/checkouts/active
  honors the badge filter; dead client methods pruned.

Also: warranties list page no longer requires login (matches app
convention); collector doc rewritten with a GE-Enforce integration guide
and paste-ready PowerShell reporter; ADR index and CHANGELOG updated.

Verified: 323 tests pass, naming/style green, frontend builds, plugin
migration dry-run green on scratch MySQL.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

frontend/src/api/index.js

@@ -646,9 +646,6 @@ export const usbApi = {
   update(id, data) {
     return api.put(`/usb/${id}`, data)
   },
-  delete(id) {
-    return api.delete(`/usb/${id}`)
-  },
   checkout(id, data) {
     return api.post(`/usb/${id}/checkout`, data)
   },
@@ -658,25 +655,10 @@ export const usbApi = {
   getHistory(id, params = {}) {
     return api.get(`/usb/${id}/history`, { params })
   },
-  getAvailable() {
-    return api.get('/usb/available')
-  },
-  getCheckedOut() {
-    return api.get('/usb/checkedout')
-  },
-  getUserCheckouts(userId) {
-    return api.get(`/usb/user/${userId}`)
-  },
-  dashboardSummary() {
-    return api.get('/usb/dashboard/summary')
-  },
-  types: {
-    list() {
-      return api.get('/usb/types')
-    },
-    create(data) {
-      return api.post('/usb/types', data)
-    }
+  // check-out log rows for one badge; activeonly = only currently-held devices
+  getUserCheckouts(badge, activeonly = true) {
+    const path = activeonly ? '/usb/checkouts/active' : '/usb/checkouts'
+    return api.get(path, { params: { badge } })
   }
 }
 
@@ -694,9 +676,6 @@ export const reportsApi = {
   kbPopularity(params = {}) {
     return api.get('/reports/kb-popularity', { params })
   },
-  warrantyStatus(params = {}) {
-    return api.get('/reports/warranty-status', { params })
-  },
   softwareCompliance(params = {}) {
     return api.get('/reports/software-compliance', { params })
   },
@@ -767,6 +746,10 @@ export const pluginsApi = {
   list() {
     return api.get('/plugins')
   },
+  // Flat array of enabled plugin names. jwt-optional, safe for kiosk routes.
+  enabled() {
+    return api.get('/plugins/enabled')
+  },
   setEnabled(name, enabled) {
     return api.put(`/plugins/${name}`, { enabled })
   }
@@ -1026,3 +1009,46 @@ export const warrantyApi = {
     return api.get('/warranty/report')
   }
 }
+
+// Measuring tools API (plugin)
+export const measuringtoolsApi = {
+  list(params = {}) {
+    return api.get('/measuringtools', { params })
+  },
+  get(id) {
+    return api.get(`/measuringtools/${id}`)
+  },
+  getByAsset(assetid) {
+    return api.get(`/measuringtools/by-asset/${assetid}`)
+  },
+  create(data) {
+    return api.post('/measuringtools', data)
+  },
+  update(id, data) {
+    return api.put(`/measuringtools/${id}`, data)
+  },
+  remove(id) {
+    return api.delete(`/measuringtools/${id}`)
+  },
+  calibrationReport() {
+    return api.get('/measuringtools/report/calibration')
+  },
+  // Measuring-tool types
+  types: {
+    list(params = {}) {
+      return api.get('/measuringtools/types', { params })
+    },
+    get(id) {
+      return api.get(`/measuringtools/types/${id}`)
+    },
+    create(data) {
+      return api.post('/measuringtools/types', data)
+    },
+    update(id, data) {
+      return api.put(`/measuringtools/types/${id}`, data)
+    },
+    remove(id) {
+      return api.delete(`/measuringtools/types/${id}`)
+    }
+  }
+}