v0.17.3: bug-fix maintenance pass — ingest origin exemption, FK safety, auto-search reset, deterministic ingest, WAL, config centralization, dead-code removal

- /api/ingest exempt from origin check for CLI/Bearer clients
- recreate deleted conversations on bogus conversation_id (chat + search)
- augmented auto-search emits reset:true; frontend clears first-pass text
- image uploads stored as placeholders, never text-ingested
- check_fact_conflicts requires shared subject keywords
- deterministic ingest point ids (md5 chunk hash)
- get_load() no longer crashes when rocm-smi yields no VRAM lines
- SQLite WAL + busy_timeout; timing-safe API key compares
- supervise fire-and-forget auto-ingest tasks; log missing logprobs
- centralize EMBED_URL/EMBED_MODEL/QDRANT_URL/NODE_NAME in config
- remove dead triage.py, select_node tests, is_state_changing, stray artifacts
- add regression tests + autouse global-reset conftest

routers/upload.py

@@ -52,12 +52,21 @@ async def upload_file(
         except Exception as e:
             log.warning(f"PDF extraction error: {e}")
             raise HTTPException(status_code=422, detail="Failed to extract text from PDF")
+    elif content_type.startswith("image/"):
+        # No OCR pipeline exists — store a descriptive placeholder so images
+        # remain usable in the gallery/context but never pollute the RAG corpus.
+        extracted = f"[Image: {file.filename}]"
     else:
         extracted = raw_bytes.decode("utf-8", errors="replace")
 
     result = {"filename": file.filename, "size_bytes": len(raw_bytes), "mode": mode}
 
-    if mode in ("ingest", "both"):
+    is_image = content_type.startswith("image/")
+    if is_image and mode in ("ingest", "both"):
+        result["chunks_ingested"] = 0
+        result["note"] = "Image files cannot be text-ingested; stored for gallery/context only"
+
+    if mode in ("ingest", "both") and not is_image:
         os.makedirs(UPLOAD_DIR, exist_ok=True)
         chunks = chunk_text(extracted)
         ingested = 0