feat(api): photo visibility lifecycle with audit and outbox events

Serializes turbo tasks (concurrency=1): api and worker e2e suites share
one MySQL/MinIO and resetDb TRUNCATEs raced when run in parallel.

Co-Authored-By: Claude Code <noreply@anthropic.com>

services/api/src/photos/photos.module.ts

@@ -0,0 +1,14 @@
+// services/api/src/photos/photos.module.ts —— 照片管理模块（Task 24）。
+// 装配：PhotosController/PhotosService + PermissionsService（经 AlbumsModule
+// 导入复用 A02 逐次权限判定；同 uploads 模块的装配先例）。
+import { Module } from '@nestjs/common';
+import { AlbumsModule } from '../albums/albums.module';
+import { PhotosController } from './photos.controller';
+import { PhotosService } from './photos.service';
+
+@Module({
+  imports: [AlbumsModule],
+  controllers: [PhotosController],
+  providers: [PhotosService],
+})
+export class PhotosModule {}