chore: move place backend to proper DI

Fold the 1029-line services/placeService.ts into the DI-native PlacesService:
the CRUD + ratings SQL, the GPX/KML/KMZ importers and the Google/Naver list
importers become methods over the injected DatabaseService, byte-identical
statements, COALESCE semantics and the If-Match conflict protocol (#1135).
The pure half — frozen XML parsers, the KMZ unpacker, the dedup predicates,
the Google hex-id parsers, reclaimPhotoCache — moves to places.helpers.ts
(maps.helpers precedent).

The 10-tool mcp/tools/places.ts registrar plus the trek://trips/{tripId}/places
resource move onto the decorator registry as places.mcp.ts. search_place travels
with them because its gate is places:read, not the read-only geo group, and now
injects MapsService. TripsService, DaysMcp, BookingImportService and the plugin
RPC host (PluginHostDepsFactory's 21st constructor dep) all inject PlacesService,
so the domain needs no bridge at all. The two assignments.bridge imports that
places.mcp.ts keeps are a deliberate cycle break: AssignmentsModule imports
DaysModule and DaysModule now imports PlacesModule for days.mcp.ts's place
creation, so injecting AssignmentsService there would close
DaysModule -> PlacesModule -> AssignmentsModule -> DaysModule. Same seam
reservations.mcp.ts uses, same trade trips.bridge.ts documents.

Also folds services/placeEnrichment.ts in — its DB/websocket/Maps half becomes
PlacesService methods over the injected DatabaseService/RealtimeService/
MapsService, its pure match selector joins places.helpers.ts — which retires
nest/maps/maps.bridge.ts with its last consumer.

Adopts places.dto.ts for the seven grandfathered body contracts and clears every
PlacesController entry from body-contract-allow-list.ts. Two consequences worth
knowing: the bespoke 400s 'Place name is required', 'ids must be an array of
numbers' and 'URL is required' are now the ZodValidationPipe envelope, and
because a pipe runs before the handler a malformed body 400s ahead of the
trip-access 404 it used to follow — the same trade the todo and trips migrations
took. placeBulkUpdateRequestSchema.ids drops .min(1) so the endpoint's
empty-list short-circuit stays reachable.

Fixes four defects the relocation had faithfully carried, each with a
failing-first regression test:

- create dropped lat/lng of exactly 0, so a place on the equator or the prime
  meridian lost its coordinates (`x || null` cannot tell absent from zero).
- duration_minutes: 0 was unsettable — replaced by the 60-minute default on
  create, and read as "absent" by COALESCE on update.
- the journey delete hook fired on unscoped ids: DELETE /:id, POST /bulk-delete
  and the delete_place MCP tool could detach another trip's journey entries for
  an id they then refused. All three scope first via the new
  PlacesService.scopedIds, mirroring the guard PluginHostDepsFactory already had.
  bulk_delete_places also moves its hook ahead of the DELETE —
  journey_entries.source_place_id is ON DELETE SET NULL, so running it afterwards
  left the entries as orphans.
- the place search treated % and _ as LIKE wildcards; a bare % returned the whole
  trip. The three clauses now carry ESCAPE with the term escaped.

Plus hardening on the Google list fetch: the response is capped at 8 MB
(declared content-length and post-read length, the transit.service precedent)
and its JSON.parse is guarded, so a malformed provider payload produces the
existing 'Invalid list data received from Google Maps' 400 instead of throwing.

Quirks deliberately preserved: the non-COALESCE route_color (#776),
currency/transport_mode staying unclearable, importGpx returning null for a file
that parses but yields no usable geometry, update skipping the If-Match check
when the stored updated_at is null, and every string-valued `x || null`.

Tests move with their case IDs: placeService.test.ts and the wrapper suite merge
into unit/nest/places.service.test.ts, kmzUnpack into places.helpers.test.ts,
placeEnrichment into places.enrichment.test.ts. The places e2e converts to the
DI-native pattern (real SQL against temp-db DDL), tools-places.test.ts is kept
and extended so it exercises the decorator path through the test registry, and
the plugin-host and booking-import path mocks become constructor stubs.

server/src/nest/plugins/DI-MIGRATION.md

@@ -123,8 +123,11 @@ budget migration — its `listBudgetItems` import became the already-injected
 2026-07 with the trip fold — its six imported symbols (`listTrips`,
 `updateTrip`, `createTrip`, `removeMember`, `NotFoundError`, `ValidationError`)
 became the injected `TripsService`, with the error classes now imported from
-`nest/trips/trips.service`; the remaining factory
-imports are all Wave-4+/5 domains: places, journeys, atlas, collections).
+`nest/trips/trips.service`; placeService swapped in 2026-07 with the place
+fold — its four imported symbols (`createPlace`, `updatePlace`, `deletePlace`,
+`getPlace`) became the injected `PlacesService`, the factory's 21st constructor
+dep; the remaining factory
+imports are all Wave-5 domains: journeys, atlas, collections).
 
 ### Test impact (as landed)
 

server/src/nest/plugins/host/plugin-host-deps.factory.ts

@@ -15,7 +15,7 @@ import pathMod from 'node:path';
 import { randomUUID } from 'node:crypto';
 import { PermissionsService } from '../../permissions/permissions.service';
 import { TripsService, NotFoundError, ValidationError } from '../../trips/trips.service';
-import { createPlace, updatePlace, deletePlace, getPlace } from '../../../services/placeService';
+import { PlacesService, type PlaceCreateInput, type PlaceUpdateInput } from '../../places/places.service';
 import { AddonsService } from '../../addons/addons.service';
 import { isDemoEmail } from '../../../services/demo';
 import { ADDON_IDS } from '../../../addons';
@@ -161,6 +161,7 @@ export class PluginHostDepsFactory {
     private readonly addons: AddonsService,
     private readonly realtime: RealtimeService,
     private readonly trips: TripsService,
+    private readonly places: PlacesService,
   ) {}
 
   /**
@@ -467,7 +468,7 @@ export class PluginHostDepsFactory {
         this.realtime.broadcast(tripId, 'budget:deleted', { itemId });
         return { deleted: true };
       },
-      // --- Places (place_edit). Delegate to the same placeService the REST/MCP paths
+      // --- Places (place_edit). Delegate to the same PlacesService the REST/MCP paths
       // use, then broadcast the same events so open web sessions update live, and run
       // the journey hooks places.controller runs on the same three writes: a journey
       // linked to the trip carries a skeleton entry per day-assigned place, and
@@ -475,13 +476,13 @@ export class PluginHostDepsFactory {
       // somebody reloads it. ---
       canEditPlaces: (tripId, userId) => this.canEditTripAs('place_edit', tripId, userId),
       createPlace: (tripId, input) => {
-        const place = createPlace(String(tripId), input as Parameters<typeof createPlace>[1]);
+        const place = this.places.create(String(tripId), input as unknown as PlaceCreateInput);
         this.realtime.broadcast(tripId, 'place:created', { place });
         mirrorJourneys(() => onPlaceCreated(Number(tripId), place.id));
         return place;
       },
       updatePlace: (tripId, placeId, input) => {
-        const place = updatePlace(String(tripId), String(placeId), input as Parameters<typeof updatePlace>[2]);
+        const place = this.places.update(String(tripId), String(placeId), input as PlaceUpdateInput);
         if (place === null) throw new ForbiddenResource(`no place ${placeId} on trip ${tripId}`);
         this.realtime.broadcast(tripId, 'place:updated', { place });
         mirrorJourneys(() => onPlaceUpdated(Number(placeId)));
@@ -491,12 +492,12 @@ export class PluginHostDepsFactory {
         // Scope the id to the trip before anything else: onPlaceDeleted keys on the
         // place alone, so an id belonging to a foreign trip would detach that trip's
         // journey entries even though the delete below refuses it.
-        if (!getPlace(String(tripId), String(placeId))) throw new ForbiddenResource(`no place ${placeId} on trip ${tripId}`);
+        if (!this.places.get(String(tripId), String(placeId))) throw new ForbiddenResource(`no place ${placeId} on trip ${tripId}`);
         // Ahead of the DELETE, like the REST route and the MCP tool: journey_entries
         // .source_place_id is ON DELETE SET NULL, so afterwards the hook finds nothing
         // left to detach and the entries linger as orphans.
         mirrorJourneys(() => onPlaceDeleted(Number(placeId)));
-        const deleted = deletePlace(String(tripId), String(placeId));
+        const deleted = this.places.remove(String(tripId), String(placeId));
         if (!deleted) throw new ForbiddenResource(`no place ${placeId} on trip ${tripId}`);
         this.realtime.broadcast(tripId, 'place:deleted', { placeId });
         return { deleted: true };

server/src/nest/plugins/plugins.module.ts

@@ -37,6 +37,7 @@ import { FilesModule } from '../files/files.module';
 import { CollabModule } from '../collab/collab.module';
 import { VacayModule } from '../vacay/vacay.module';
 import { TripsModule } from '../trips/trips.module';
+import { PlacesModule } from '../places/places.module';
 import { PermissionsModule } from '../permissions/permissions.module';
 import { AuditModule } from '../audit/audit.module';
 import { AddonsModule } from '../addons/addons.module';
@@ -51,7 +52,7 @@ import { AddonsModule } from '../addons/addons.module';
 @Module({
   // The DI-native domain services the plugin host wiring injects
   // (PluginHostDepsFactory); DatabaseModule is @Global, so not listed.
-  imports: [TagsModule, CategoriesModule, BudgetModule, ReservationsModule, TodoModule, PackingModule, DaysModule, AssignmentsModule, LlmParseModule, FilesModule, CollabModule, VacayModule, TripsModule, PermissionsModule, AuditModule, AddonsModule],
+  imports: [TagsModule, CategoriesModule, BudgetModule, ReservationsModule, TodoModule, PackingModule, DaysModule, AssignmentsModule, LlmParseModule, FilesModule, CollabModule, VacayModule, TripsModule, PermissionsModule, AuditModule, AddonsModule, PlacesModule],
   controllers: [PluginsController, PluginsFeedController, PluginsProxyController, PluginFrameController, PlaceDetailsController, TripWarningsController, ViewContributionsController, TripCardContributionsController, PluginPhotosController, PluginCalendarController, MapMarkersController, MapLayersController, PluginRoutesController, DayScheduleController, PdfSectionsController, AtlasLayersController, JournalEntryRowsController, PluginUserSettingsController, PluginOAuthController, PluginActivityController],
   providers: [PluginsService, PluginRuntimeService, PluginRegistryService, PluginOAuthService, PluginHostDepsFactory],
   // Exported so the admin addon-toggle handler can cascade-disable plugins whose