fix: legacy QR URLs without '?' (productid in path) redirect to /t/CODE (new tag 97 now scans); preview page photo portrait aspect; Preview button on user tags list; admin photo form = preview + standalone Upload button (removed URL TextInput — no duplicate, no stale placeholder)

frontend/templates/tag-list.html

@@ -25,6 +25,7 @@
           {{if ne .Status "closed"}}
           <a href="/account/tags/{{.ID}}/edit" class="text-amber-600 hover:underline">Edit</a>
           {{end}}
+          <a href="/t/{{.TagCode}}?preview=1" target="_blank" rel="noopener" class="ml-3 text-blue-600 hover:underline">Preview</a>
           <form hx-post="/account/tags/{{.ID}}/close" hx-target="#account-panel" hx-swap="outerHTML" hx-confirm="Close this tag? It will stop alerts but keep its details." class="inline">
             <button class="ml-3 text-stone-500 hover:underline">Close</button>
           </form>

frontend/templates/tag-public.html

@@ -40,7 +40,7 @@
       </div>
       <div class="p-6">
         {{if .Data.PhotoUrl.Valid}}
-        <img src="{{.Data.PhotoUrl.String}}?v={{.Data.UpdatedAt.Time.Unix}}" alt="Item photo" class="mb-4 h-56 w-full rounded-lg object-cover">
+        <img src="{{.Data.PhotoUrl.String}}?v={{.Data.UpdatedAt.Time.Unix}}" alt="Item photo" class="mb-4 w-full rounded-lg object-cover" style="aspect-ratio: 3 / 4;">
         {{end}}
         {{if .Data.Description.Valid}}
         <p class="text-stone-700">{{.Data.Description.String}}</p>