feat(tenant): per-theme logos + file-upload + button UI polish

Replace the single tenant avatar with a pair of theme-scoped brand logos.
Render only the theme-matching <img> server-side and swap src on theme
toggle via a JS hook — no reload, no double request, no CSS tricks.

Tenant logos
- TenantLogoService (ImageUploadTrait) with theme whitelist and per-theme
  storage storage/tenants/{uuid}/logo/{light|dark}/, SIZES 128/256/512
- Public serving endpoint auth/tenant-logo-file so login can show the
  logo pre-auth; matching authenticated admin preview endpoint
- appTenantLogoUrl(?size, ?theme) with 4-step fallback cascade; PDF +
  mail always request 'light'
- Admin tenant edit: avatar block replaced by "Tenant logos" details
  block inside the Master-data tab, two side-by-side slots via Pico
  .grid with the core app-file-upload partial
- Policy rename ABILITY_ADMIN_TENANTS_AVATAR_VIEW -> LOGO_VIEW, action
  routes logo / logo-delete / logo-file with theme body/query param
- API endpoint path kept (backward compat), internals on new service
- CLI tenant:logo-migrate-avatars moves legacy avatar/ -> logo/light/
  idempotently (--dry-run, --yes, --cleanup)
- i18n "Tenant image" removed, 12 new keys synced across de/en

File upload component
- Full-width preview + filename/actions below (3D stack layout)
- Fixed 16:9 aspect ratio with 1rem inner padding for consistent
  preview size across any logo aspect
- Transparency checker pattern as background so black logos stay
  visible on dark mode and white logos on light mode
- form="" + deleteFormId support so the partial works with barrier
  forms inside another form

Buttons
- width:100% dropped from button[type="submit"]; scoped back via
  .login-main for the auth-flow primary CTA
- .outline base rule now tints background via color-mix of --app-color
  so secondary/primary/danger outlines all gain a subtle surface
- .outline.secondary restyled Stripe-style in both themes: solid white
  chip with soft shadow in light, solid elevated dark chip with white
  text in dark; neutral border replaces role-colored border
- .app-action-success/.app-action-danger outlines get color-mix bg +
  theme-aware outline-text tokens for stronger contrast
- Filled .primary/.app-action-success/.app-action-danger get raised
  box-shadow (inset highlight + drop) — opt-in via class so chrome
  buttons stay flat
- Dropped the legacy .secondary utility that was clobbering the
  custom-property cascade with a hardcoded muted color

Theme swap
- Logo img carries data-src-light + data-src-dark; theme-toggle JS
  swaps src when data-theme changes, keeping the topbar/login logo in
  sync without a page reload

Quality gates: PHPUnit (2045), PHPStan L5, CS-Fixer, docs link/drift,
codex skills sync — all green.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

pages/auth/login().php

@@ -69,12 +69,12 @@ $authServicesFactory = app(AuthServicesFactory::class);
 $authService = $authServicesFactory->createAuthService();
 $rememberMeService = $authServicesFactory->createRememberMeService();
 $tenantSsoService = $authServicesFactory->createTenantSsoService();
-$tenantAvatarService = (app(TenantServicesFactory::class))->createTenantAvatarService();
+$tenantLogoService = (app(TenantServicesFactory::class))->createTenantLogoService();
 $userServicesFactory = app(UserServicesFactory::class);
 $userReadRepository = $userServicesFactory->createUserReadRepository();
 $userTenantContextService = $userServicesFactory->createUserTenantContextService();
 
-$resolveLoginCandidates = static function (string $inputEmail) use ($userReadRepository, $userTenantContextService, $tenantSsoService, $tenantAvatarService): array {
+$resolveLoginCandidates = static function (string $inputEmail) use ($userReadRepository, $userTenantContextService, $tenantSsoService, $tenantLogoService): array {
     $emailValue = strtolower(trim($inputEmail));
     if ($emailValue === '' || !filter_var($emailValue, FILTER_VALIDATE_EMAIL)) {
         return ['ok' => false];
@@ -119,7 +119,10 @@ $resolveLoginCandidates = static function (string $inputEmail) use ($userReadRep
             ? ($discoveryMethodsByTenantId[$tenantId] ?? ['local' => false, 'microsoft' => false, 'microsoft_reason' => '', 'ldap' => false, 'ldap_reason' => ''])
             : $tenantSsoService->resolveTenantLoginMethods($tenantId);
         $tenantUuid = (string) ($tenant['uuid'] ?? '');
-        $hasAvatar = $tenantUuid !== '' && $tenantAvatarService->hasAvatar($tenantUuid);
+        $hasLogoLight = $tenantUuid !== '' && $tenantLogoService->hasLogo($tenantUuid, \MintyPHP\Service\Tenant\TenantLogoService::THEME_LIGHT);
+        $hasLogoDark = $tenantUuid !== '' && $tenantLogoService->hasLogo($tenantUuid, \MintyPHP\Service\Tenant\TenantLogoService::THEME_DARK);
+        $hasAvatar = $hasLogoLight || $hasLogoDark;
+        $logoTheme = $hasLogoLight ? 'light' : ($hasLogoDark ? 'dark' : '');
         $candidate = [
           'id' => $tenantId,
           'uuid' => $tenantUuid,
@@ -127,7 +130,7 @@ $resolveLoginCandidates = static function (string $inputEmail) use ($userReadRep
           'slug' => $tenantSlug,
           'has_avatar' => $hasAvatar,
           'avatar_url' => $hasAvatar
-            ? lurl('auth/tenant-avatar-file?uuid=' . rawurlencode($tenantUuid) . '&size=256')
+            ? lurl('auth/tenant-logo-file?uuid=' . rawurlencode($tenantUuid) . '&theme=' . rawurlencode($logoTheme) . '&size=256')
             : '',
           'methods' => $methods,
         ];

pages/auth/tenant-logo-file().php

@@ -4,10 +4,12 @@ use MintyPHP\Service\Tenant\TenantServicesFactory;
 
 define('MINTY_ALLOW_OUTPUT', true);
 
-$uuid = trim((string) (requestInput()->queryAll()['uuid'] ?? ''));
-$size = isset(requestInput()->queryAll()['size']) ? (int) requestInput()->queryAll()['size'] : null;
-$tenantAvatarService = (app(TenantServicesFactory::class))->createTenantAvatarService();
-if (!$tenantAvatarService->isValidUuid($uuid)) {
+$query = requestInput()->queryAll();
+$uuid = trim((string) ($query['uuid'] ?? ''));
+$theme = strtolower(trim((string) ($query['theme'] ?? '')));
+$size = isset($query['size']) ? (int) $query['size'] : null;
+$tenantLogoService = (app(TenantServicesFactory::class))->createTenantLogoService();
+if (!$tenantLogoService->isValidUuid($uuid) || !$tenantLogoService->isValidTheme($theme)) {
     http_response_code(404);
     return;
 }
@@ -18,13 +20,13 @@ if (!$tenant || (string) ($tenant['status'] ?? 'active') !== 'active') {
     return;
 }
 
-$path = $tenantAvatarService->findAvatarPath($uuid, $size);
+$path = $tenantLogoService->findLogoPath($uuid, $theme, $size);
 if (!$path || !is_file($path)) {
     http_response_code(404);
     return;
 }
 
-$mime = $tenantAvatarService->detectMime($path);
+$mime = $tenantLogoService->detectMime($path);
 header('Content-Type: ' . $mime);
 header('X-Content-Type-Options: nosniff');
 header('Content-Security-Policy: sandbox');