make the appType allow-list a prop instead of fourteen copies

Every locked screen shipped the same recursive normaliser: an ALLOWED_APP_TYPES set, a
normalizeLayout, a useMemo to apply it before the wrong panel could render, and a useEffect to
persist the fix. Fourteen copies, character-for-character identical except the two names — so a
fifteenth screen was a copy-paste, and a bug in the shape was a bug in fourteen places.

It is now `<WorkspaceView appTypes={{ allowed, fallback }} />`. WorkspaceView normalises before it
renders and persists the diff itself, which is the same two effects the screens were writing by hand.

One deliberate behaviour change: the framework normaliser drops `config` when it replaces an app.
The fourteen copies did `{ ...node, appType: fallback }`, keeping the old app's config on the panel
the new app now owns. That is the opposite of what `setApp` does, and a config belongs to whoever
wrote it.

Headscale keeps a local useMemo. Its check is not "is this appType allowed" but "is the server
picker present at all" — a layout saved before that panel existed is discarded for the default
wholesale. That is about a panel being missing, which the allow-list cannot see.

QrTransfer gains a persist-back it never had: it normalised on read and threw the result away every
time.

Tests: normalizeLayout is pinned on reference-identity for a no-op, null always allowed, config
dropped on replacement, rebuilding only changed branches, and idempotence — because a normaliser
that does not normalise to itself makes the persist-back an infinite write loop.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/apps/officer-web/Screens/Dashboard/Photos/PhotosScreen.tsx

@@ -1,4 +1,3 @@
-import { useEffect, useMemo } from 'react';
 import { Navigate, useParams } from 'react-router';
 import type { LayoutNode } from 'officerdev';
 import { WorkspaceView, DEFAULT_PHOTOS_SECTION, photosSectionPath, isPhotosSection } from 'officerdev';
@@ -12,35 +11,9 @@ import { defaultLayout } from './defaultLayout';
 // The open section is :section in the URL; deeper selection (which asset, album, person, search) is in the
 // query string. Nothing about "what is open" lives in a panel channel.
 
-const ALLOWED_APP_TYPES = new Set<string | null>(['photos-nav', 'photos-view', null]);
-
-function normalizeLayout(node: LayoutNode): LayoutNode {
-  if (node.type === 'panel') {
-    return ALLOWED_APP_TYPES.has(node.appType) ? node : { ...node, appType: 'photos-view' };
-  }
-  const children = node.children.map((c) => {
-    const fixed = normalizeLayout(c.node);
-    return fixed === c.node ? c : { ...c, node: fixed };
-  });
-  const changed = children.some((c, i) => c !== node.children[i]);
-  return changed ? { ...node, children } : node;
-}
-
 export const PhotosScreen = () => {
   const { section } = useParams();
-  const rawWorkspace = useDashboardState<LayoutNode>('screens/photos', defaultLayout);
-
-  const workspace = useMemo(() => {
-    const fixed = normalizeLayout(rawWorkspace.value);
-    if (fixed === rawWorkspace.value) return rawWorkspace;
-    return { ...rawWorkspace, value: fixed };
-  }, [rawWorkspace]);
-
-  useEffect(() => {
-    if (rawWorkspace.isLoaded && workspace.value !== rawWorkspace.value) {
-      rawWorkspace.setValue(workspace.value);
-    }
-  }, [rawWorkspace.isLoaded, workspace.value, rawWorkspace.value]);
+  const workspace = useDashboardState<LayoutNode>('screens/photos', defaultLayout);
 
   // Bare /photos, or a section that doesn't exist, canonicalises rather than rendering a default behind a URL
   // that names something else — the nav highlight comes from the router, so a bogus URL highlights nothing.
@@ -50,7 +23,11 @@ export const PhotosScreen = () => {
 
   return (
     <div className="h-full w-full pt-2">
-      <WorkspaceView workspace={workspace} locked />
+      <WorkspaceView
+        workspace={workspace}
+        locked
+        appTypes={{ allowed: ['photos-nav', 'photos-view'], fallback: 'photos-view' }}
+      />
     </div>
   );
 };