Add phase 2: recipes with visibility, photos, search and favourites

- Recipe model with ingredients (amount/range, unit, group, note), steps,
  lowercase tags, author notes, source URL and private/public visibility
- Central RecipeQuerySet.visible_to() used by every read path; edit only
  by owner, delete by owner or admin (visible recipes only)
- Text-based editing: ingredient/step parser with roundtrip and scaling
- Photo upload (JPEG/PNG/WebP/HEIC), re-encoded to WebP without EXIF,
  thumbnails, cover image, served only through permission-checked view
- Search across title, description, ingredients, tags; ingredient and tag
  filters; "mine" and favourites views
- Admin can delete all recipes of a deactivated user
- Acceptance tests: private recipes unreachable for others and admins
  in list, search, tags, favourites, detail, edit, delete and image URLs

Co-Authored-By: Claude Opus 5.5 <[email protected]>

templates/recipes/form.html

@@ -0,0 +1,39 @@
+{% extends "base.html" %}
+{% block title %}{% if is_new %}Neues Rezept{% else %}{{ recipe.title }} bearbeiten{% endif %}{% endblock %}
+{% block content %}
+<h1>{% if is_new %}Neues Rezept{% else %}Rezept bearbeiten{% endif %}</h1>
+
+{% block before_form %}{% endblock %}
+
+<form method="post" enctype="multipart/form-data" class="card recipe-form" novalidate>
+  {% csrf_token %}
+  {% include "form_fields.html" %}
+  {% block form_buttons %}
+  <div class="form-buttons">
+    <button type="submit" class="button">Speichern</button>
+    <a class="button secondary" href="{% if recipe %}{% url 'recipes:detail' recipe.pk %}{% else %}{% url 'recipes:list' %}{% endif %}">Abbrechen</a>
+  </div>
+  {% endblock %}
+</form>
+
+{% if recipe and images %}
+<section class="card">
+  <h2>Fotos</h2>
+  <ul class="photo-admin">
+    {% for img in images %}
+    <li>
+      <img src="{% url 'recipes:photo' img.uuid 'klein' %}" alt="Foto {{ forloop.counter }}" loading="lazy">
+      <div class="action-buttons">
+        {% if img.is_cover %}
+          <span class="badge">Titelbild</span>
+        {% else %}
+          <form method="post" action="{% url 'recipes:photo_cover' recipe.pk img.pk %}">{% csrf_token %}<button class="button secondary small">Als Titelbild</button></form>
+        {% endif %}
+        <form method="post" action="{% url 'recipes:photo_delete' recipe.pk img.pk %}">{% csrf_token %}<button class="button danger small">Entfernen</button></form>
+      </div>
+    </li>
+    {% endfor %}
+  </ul>
+</section>
+{% endif %}
+{% endblock %}