refactor: migrate vendor APIs to token-based context and consolidate architecture

## Vendor-in-Token Architecture (Complete Migration)
- Migrate all vendor API endpoints from require_vendor_context() to token_vendor_id
- Update permission dependencies to extract vendor from JWT token
- Add vendor exceptions: VendorAccessDeniedException, VendorOwnerOnlyException,
  InsufficientVendorPermissionsException
- Shop endpoints retain require_vendor_context() for URL-based detection
- Add AUTH-004 architecture rule enforcing vendor context patterns
- Fix marketplace router missing /marketplace prefix

## Exception Pattern Fixes (API-003/API-004)
- Services raise domain exceptions, endpoints let them bubble up
- Add code_quality and content_page exception modules
- Move business logic from endpoints to services (admin, auth, content_page)
- Fix exception handling in admin, shop, and vendor endpoints

## Tailwind CSS Consolidation
- Consolidate CSS to per-area files (admin, vendor, shop, platform)
- Remove shared/cdn-fallback.html and shared/css/tailwind.min.css
- Update all templates to use area-specific Tailwind output files
- Remove Node.js config (package.json, postcss.config.js, tailwind.config.js)

## Documentation & Cleanup
- Update vendor-in-token-architecture.md with completed migration status
- Update architecture-rules.md with new rules
- Move migration docs to docs/development/migration/
- Remove duplicate/obsolete documentation files
- Merge pytest.ini settings into pyproject.toml

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

app/api/v1/vendor/inventory.py

@@ -1,4 +1,9 @@
 # app/api/v1/vendor/inventory.py
+"""
+Vendor inventory management endpoints.
+
+Vendor Context: Uses token_vendor_id from JWT token (authenticated vendor API pattern)
+"""
 import logging
 
 from fastapi import APIRouter, Depends, Query
@@ -6,10 +11,9 @@ from sqlalchemy.orm import Session
 
 from app.api.deps import get_current_vendor_api
 from app.core.database import get_db
+from app.exceptions import InvalidTokenException
 from app.services.inventory_service import inventory_service
-from middleware.vendor_context import require_vendor_context
 from models.database.user import User
-from models.database.vendor import Vendor
 from models.schema.inventory import (
     InventoryAdjust,
     InventoryCreate,
@@ -24,70 +28,77 @@ router = APIRouter()
 logger = logging.getLogger(__name__)
 
 
+def _get_vendor_id_from_token(current_user: User) -> int:
+    """Helper to get vendor_id from JWT token."""
+    if not hasattr(current_user, "token_vendor_id"):
+        raise InvalidTokenException("Token missing vendor information. Please login again.")
+    return current_user.token_vendor_id
+
+
 @router.post("/inventory/set", response_model=InventoryResponse)
 def set_inventory(
     inventory: InventoryCreate,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Set exact inventory quantity (replaces existing)."""
-    return inventory_service.set_inventory(db, vendor.id, inventory)
+    vendor_id = _get_vendor_id_from_token(current_user)
+    return inventory_service.set_inventory(db, vendor_id, inventory)
 
 
 @router.post("/inventory/adjust", response_model=InventoryResponse)
 def adjust_inventory(
     adjustment: InventoryAdjust,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Adjust inventory (positive to add, negative to remove)."""
-    return inventory_service.adjust_inventory(db, vendor.id, adjustment)
+    vendor_id = _get_vendor_id_from_token(current_user)
+    return inventory_service.adjust_inventory(db, vendor_id, adjustment)
 
 
 @router.post("/inventory/reserve", response_model=InventoryResponse)
 def reserve_inventory(
     reservation: InventoryReserve,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Reserve inventory for an order."""
-    return inventory_service.reserve_inventory(db, vendor.id, reservation)
+    vendor_id = _get_vendor_id_from_token(current_user)
+    return inventory_service.reserve_inventory(db, vendor_id, reservation)
 
 
 @router.post("/inventory/release", response_model=InventoryResponse)
 def release_reservation(
     reservation: InventoryReserve,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Release reserved inventory (cancel order)."""
-    return inventory_service.release_reservation(db, vendor.id, reservation)
+    vendor_id = _get_vendor_id_from_token(current_user)
+    return inventory_service.release_reservation(db, vendor_id, reservation)
 
 
 @router.post("/inventory/fulfill", response_model=InventoryResponse)
 def fulfill_reservation(
     reservation: InventoryReserve,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Fulfill reservation (complete order, remove from stock)."""
-    return inventory_service.fulfill_reservation(db, vendor.id, reservation)
+    vendor_id = _get_vendor_id_from_token(current_user)
+    return inventory_service.fulfill_reservation(db, vendor_id, reservation)
 
 
 @router.get("/inventory/product/{product_id}", response_model=ProductInventorySummary)
 def get_product_inventory(
     product_id: int,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Get inventory summary for a product."""
-    return inventory_service.get_product_inventory(db, vendor.id, product_id)
+    vendor_id = _get_vendor_id_from_token(current_user)
+    return inventory_service.get_product_inventory(db, vendor_id, product_id)
 
 
 @router.get("/inventory", response_model=InventoryListResponse)
@@ -96,13 +107,13 @@ def get_vendor_inventory(
     limit: int = Query(100, ge=1, le=1000),
     location: str | None = Query(None),
     low_stock: int | None = Query(None, ge=0),
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Get all inventory for vendor."""
+    vendor_id = _get_vendor_id_from_token(current_user)
     inventories = inventory_service.get_vendor_inventory(
-        db, vendor.id, skip, limit, location, low_stock
+        db, vendor_id, skip, limit, location, low_stock
     )
 
     # Get total count
@@ -117,23 +128,23 @@ def get_vendor_inventory(
 def update_inventory(
     inventory_id: int,
     inventory_update: InventoryUpdate,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Update inventory entry."""
+    vendor_id = _get_vendor_id_from_token(current_user)
     return inventory_service.update_inventory(
-        db, vendor.id, inventory_id, inventory_update
+        db, vendor_id, inventory_id, inventory_update
     )
 
 
 @router.delete("/inventory/{inventory_id}")
 def delete_inventory(
     inventory_id: int,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
     """Delete inventory entry."""
-    inventory_service.delete_inventory(db, vendor.id, inventory_id)
+    vendor_id = _get_vendor_id_from_token(current_user)
+    inventory_service.delete_inventory(db, vendor_id, inventory_id)
     return {"message": "Inventory deleted successfully"}