Remediate the 2026-09-03 feature-test findings

frontend/src/api/index.js

@@ -405,6 +405,12 @@ export const vendorsApi = {
   list(params = {}) {
     return api.get('/vendors', { params })
   },
+  // Every vendor, paged. perpage is capped at 100 server-side, so a picker
+  // asking for 500 silently showed the first 100 and dropped the rest - with a
+  // 200, so nothing looked wrong.
+  listAll(params = {}) {
+    return fetchAllPages('/vendors', params)
+  },
   get(id) {
     return api.get(`/vendors/${id}`)
   },
@@ -667,6 +673,10 @@ export const businessunitsApi = {
   list(params = {}) {
     return api.get('/businessunits', { params })
   },
+  // See vendorsApi.listAll: the cap is 100 whatever the caller asks for.
+  listAll(params = {}) {
+    return fetchAllPages('/businessunits', params)
+  },
   get(id) {
     return api.get(`/businessunits/${id}`)
   },
@@ -1306,6 +1316,11 @@ export const slidesApi = {
   },
   remove(surface, files) {
     return api.post(`/slides/${surface}/delete`, { files })
+  },
+  // Per-slide hold time. The route has always existed; nothing called it, so
+  // the documented per-slide seconds could only be set with curl.
+  update(surface, slideid, data) {
+    return api.patch(`/slides/${surface}/${slideid}`, data)
   }
 }