Add phase 2: recipes with visibility, photos, search and favourites

- Recipe model with ingredients (amount/range, unit, group, note), steps,
  lowercase tags, author notes, source URL and private/public visibility
- Central RecipeQuerySet.visible_to() used by every read path; edit only
  by owner, delete by owner or admin (visible recipes only)
- Text-based editing: ingredient/step parser with roundtrip and scaling
- Photo upload (JPEG/PNG/WebP/HEIC), re-encoded to WebP without EXIF,
  thumbnails, cover image, served only through permission-checked view
- Search across title, description, ingredients, tags; ingredient and tag
  filters; "mine" and favourites views
- Admin can delete all recipes of a deactivated user
- Acceptance tests: private recipes unreachable for others and admins
  in list, search, tags, favourites, detail, edit, delete and image URLs

Co-Authored-By: Claude Opus 5.5 <[email protected]>

templates/accounts/admin/delete_recipes.html

@@ -0,0 +1,18 @@
+{% extends "base.html" %}
+{% block title %}Rezepte löschen{% endblock %}
+{% block content %}
+<div class="narrow">
+  <h1>Rezepte von {{ target }} löschen?</h1>
+  {% if count %}
+  <p>{{ count }} Rezept{{ count|pluralize:"e" }} (auch private) werden mit allen Fotos, Kommentaren und Favoriten endgültig gelöscht. Das Konto bleibt deaktiviert bestehen.</p>
+  <form method="post" class="form-buttons">
+    {% csrf_token %}
+    <button type="submit" class="button danger">Endgültig löschen</button>
+    <a class="button secondary" href="{% url 'accounts:admin_users' %}">Abbrechen</a>
+  </form>
+  {% else %}
+  <p>{{ target }} hat keine Rezepte.</p>
+  <p><a href="{% url 'accounts:admin_users' %}">Zurück</a></p>
+  {% endif %}
+</div>
+{% endblock %}

templates/accounts/admin/users.html

@@ -29,6 +29,7 @@
           {% endif %}
         {% else %}
           <form method="post" action="{% url 'accounts:admin_user_action' u.pk 'activate' %}">{% csrf_token %}<button class="button secondary">Aktivieren</button></form>
+          <a class="button danger" href="{% url 'accounts:admin_user_delete_recipes' u.pk %}">Rezepte löschen …</a>
         {% endif %}
       </div>
     </details>