refactor: migrate vendor APIs to token-based context and consolidate architecture

## Vendor-in-Token Architecture (Complete Migration)
- Migrate all vendor API endpoints from require_vendor_context() to token_vendor_id
- Update permission dependencies to extract vendor from JWT token
- Add vendor exceptions: VendorAccessDeniedException, VendorOwnerOnlyException,
  InsufficientVendorPermissionsException
- Shop endpoints retain require_vendor_context() for URL-based detection
- Add AUTH-004 architecture rule enforcing vendor context patterns
- Fix marketplace router missing /marketplace prefix

## Exception Pattern Fixes (API-003/API-004)
- Services raise domain exceptions, endpoints let them bubble up
- Add code_quality and content_page exception modules
- Move business logic from endpoints to services (admin, auth, content_page)
- Fix exception handling in admin, shop, and vendor endpoints

## Tailwind CSS Consolidation
- Consolidate CSS to per-area files (admin, vendor, shop, platform)
- Remove shared/cdn-fallback.html and shared/css/tailwind.min.css
- Update all templates to use area-specific Tailwind output files
- Remove Node.js config (package.json, postcss.config.js, tailwind.config.js)

## Documentation & Cleanup
- Update vendor-in-token-architecture.md with completed migration status
- Update architecture-rules.md with new rules
- Move migration docs to docs/development/migration/
- Remove duplicate/obsolete documentation files
- Merge pytest.ini settings into pyproject.toml

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

app/api/v1/vendor/media.py

@@ -2,6 +2,8 @@
 # app/api/v1/vendor/media.py
 """
 Vendor media and file management endpoints.
+
+Vendor Context: Uses token_vendor_id from JWT token (authenticated vendor API pattern)
 """
 
 import logging
@@ -11,21 +13,27 @@ from sqlalchemy.orm import Session
 
 from app.api.deps import get_current_vendor_api
 from app.core.database import get_db
-from middleware.vendor_context import require_vendor_context
+from app.exceptions import InvalidTokenException
+from app.services.vendor_service import vendor_service
 from models.database.user import User
-from models.database.vendor import Vendor
 
 router = APIRouter(prefix="/media")
 logger = logging.getLogger(__name__)
 
 
+def _get_vendor_from_token(current_user: User, db: Session):
+    """Helper to get vendor from JWT token."""
+    if not hasattr(current_user, "token_vendor_id"):
+        raise InvalidTokenException("Token missing vendor information. Please login again.")
+    return vendor_service.get_vendor_by_id(db, current_user.token_vendor_id)
+
+
 @router.get("")
 def get_media_library(
     skip: int = Query(0, ge=0),
     limit: int = Query(100, ge=1, le=1000),
     media_type: str | None = Query(None, description="image, video, document"),
     search: str | None = Query(None),
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -39,6 +47,7 @@ def get_media_library(
     - Support pagination
     - Return file URLs, sizes, metadata
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {
         "media": [],
         "total": 0,
@@ -52,7 +61,6 @@ def get_media_library(
 async def upload_media(
     file: UploadFile = File(...),
     folder: str | None = Query(None, description="products, general, etc."),
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -67,6 +75,7 @@ async def upload_media(
     - Save metadata to database
     - Return file URL
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {
         "file_url": None,
         "thumbnail_url": None,
@@ -78,7 +87,6 @@ async def upload_media(
 async def upload_multiple_media(
     files: list[UploadFile] = File(...),
     folder: str | None = Query(None),
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -91,6 +99,7 @@ async def upload_multiple_media(
     - Return list of uploaded file URLs
     - Handle errors gracefully
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {
         "uploaded_files": [],
         "failed_files": [],
@@ -101,7 +110,6 @@ async def upload_multiple_media(
 @router.get("/{media_id}")
 def get_media_details(
     media_id: int,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -113,6 +121,7 @@ def get_media_details(
     - Return file URL
     - Return usage information (which products use this file)
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {"message": "Media details coming in Slice 3"}
 
 
@@ -120,7 +129,6 @@ def get_media_details(
 def update_media_metadata(
     media_id: int,
     metadata: dict,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -133,13 +141,13 @@ def update_media_metadata(
     - Update tags/categories
     - Update description
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {"message": "Media update coming in Slice 3"}
 
 
 @router.delete("/{media_id}")
 def delete_media(
     media_id: int,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -153,13 +161,13 @@ def delete_media(
     - Delete database record
     - Return success/error
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {"message": "Media deletion coming in Slice 3"}
 
 
 @router.get("/{media_id}/usage")
 def get_media_usage(
     media_id: int,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -171,6 +179,7 @@ def get_media_usage(
     - Check other entities using this media
     - Return list of usage
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {
         "products": [],
         "other_usage": [],
@@ -181,7 +190,6 @@ def get_media_usage(
 @router.post("/optimize/{media_id}")
 def optimize_media(
     media_id: int,
-    vendor: Vendor = Depends(require_vendor_context()),
     current_user: User = Depends(get_current_vendor_api),
     db: Session = Depends(get_db),
 ):
@@ -194,4 +202,5 @@ def optimize_media(
     - Keep original
     - Update database with new versions
     """
+    vendor = _get_vendor_from_token(current_user, db)  # noqa: F841 - vendor will be used when implemented
     return {"message": "Media optimization coming in Slice 3"}