fix(photo-addon): add referrer policy for OSM map tiles

OSM's tile servers require a Referer header, but oCIS may set a strict
Referrer-Policy that strips it, causing intermittent 403 errors on map
tiles. Fix: inject a meta referrer tag and set referrerPolicy on each
tile image element. Failed tiles retry once after 500ms.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: paul43210

packages/web-app-photo-addon/src/components/PhotoMap.vue

@@ -473,8 +473,36 @@ function initMap() {
     prefetchVisibleClusters()
   })
 
-  // Add OpenStreetMap tile layer (noWrap prevents world map repeating)
-  L.tileLayer('https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png', {
+  // OSM tile servers require a Referer header. Ensure referrer policy allows it.
+  let metaReferrer = document.querySelector('meta[name="referrer"]') as HTMLMetaElement | null
+  if (!metaReferrer) {
+    metaReferrer = document.createElement('meta')
+    metaReferrer.name = 'referrer'
+    metaReferrer.content = 'no-referrer-when-downgrade'
+    document.head.appendChild(metaReferrer)
+  } else if (metaReferrer.content === 'no-referrer' || metaReferrer.content === 'same-origin') {
+    // Temporarily relax for OSM tiles — restored on unmount
+    metaReferrer.dataset.originalContent = metaReferrer.content
+    metaReferrer.content = 'no-referrer-when-downgrade'
+  }
+
+  // Tile layer with retry on 403 (transient referrer issues)
+  const OsmTileLayer = L.TileLayer.extend({
+    createTile(coords: any, done: any) {
+      const tile = L.TileLayer.prototype.createTile.call(this, coords, done) as HTMLImageElement
+      tile.referrerPolicy = 'no-referrer-when-downgrade'
+      const originalSrc = tile.src
+      tile.addEventListener('error', () => {
+        // Retry once after a short delay
+        if (!tile.dataset.retried) {
+          tile.dataset.retried = '1'
+          setTimeout(() => { tile.src = originalSrc }, 500)
+        }
+      }, { once: false })
+      return tile
+    }
+  })
+  new OsmTileLayer('https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png', {
     attribution: '&copy; <a href="https://www.openstreetmap.org/copyright">OpenStreetMap</a>',
     maxZoom: 19,
     keepBuffer: 2,
@@ -780,6 +808,12 @@ onUnmounted(() => {
     activeTooltip.remove()
     activeTooltip = null
   }
+  // Restore original referrer policy if we changed it
+  const metaRef = document.querySelector('meta[name="referrer"]') as HTMLMetaElement | null
+  if (metaRef?.dataset.originalContent) {
+    metaRef.content = metaRef.dataset.originalContent
+    delete metaRef.dataset.originalContent
+  }
   // Clean up injected CSS (only if no other PhotoMap instances)
   // Note: We leave the CSS in place since it's idempotent and shared
   // Removing it could break other instances if multiple PhotoMaps exist