township: gate enhance + odds + ZIP + upload behind full-match checkboxes

A whole-match regen (scope=full) now exposes two checkboxes on the match
detail page that drive the finalization tail of the pipeline:

  - "Finalize & package" (default on): after assembly, run the 2x AI
    upscale + 2x frame interpolation pass, generate arbitrage-safe odds,
    and pack the renamed upload ZIP (each of the nine slots picked from
    its highest-quality variant via _best_variant).
  - "Upload after" (default = upload_after_render): also push the prepared
    match to the configured Township endpoint. Implies package; refuses
    cleanly (no server call) when the endpoint isn't configured.

The full job is now seven phases (was four): prompts, keyframes, render,
assemble (always) + enhance, odds/ZIP, upload (gated). The enhance pass
was previously always-on; it now sits under the package checkbox (default
checked, so existing behaviour is preserved) — unchecking gives a fast
base-res iteration with no upscale/odds/zip.

Wiring: added package/upload to the /matches/render params allowlist;
reMatch() reads the checkboxes for scope=full, folds them into the
confirm dialog, and posts them; odds/ZIP via prepare_match_odds_zip and
upload via upload_prepared_match (progress piped into the job bar).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RdMufYvtTbtGDWsiZVoXce