Add file-driven image import automation

docs/modernization/build-inventory.md

@@ -98,6 +98,10 @@ Known local toolchain state:
   capability coverage, UI color parsing, and layout XML parse coverage.
 - `pano_cli inspect-image` reports PNG IHDR metadata as JSON and is covered by
   `pano_cli_inspect_png_metadata_smoke` with a tiny IHDR fixture.
+- `pano_cli import-image` accepts a PNG path, decodes RGBA8 pixels through
+  `pp_assets`, attaches them to a pure `pp_document` face payload, and is
+  covered for metadata-valid truncated PNG rejection by
+  `pano_cli_import_image_rejects_truncated_png`.
 - `pano_cli inspect-project` reports validated PPI thumbnail/body byte layout,
   body summary fields, layer/frame descriptors, and dirty-face PNG payload
   metadata, and is covered by `pano_cli_inspect_project_layout_smoke` with a
@@ -262,8 +266,11 @@ Known local toolchain state:
   automation and is covered by `pano_cli_simulate_document_edits_smoke`.
 - `pano_cli simulate-image-import` exposes embedded PNG decode and document
   face-payload attachment through JSON automation and is covered by
-  `pano_cli_simulate_image_import_smoke`; full file import/export remains a
-  future CLI automation task.
+  `pano_cli_simulate_image_import_smoke`.
+- `pano_cli import-image` exposes file-driven PNG decode and document
+  face-payload attachment through JSON automation and is covered by
+  `pano_cli_import_image_rejects_truncated_png`; a checked-in decodable image
+  fixture and export/round-trip automation remain future CLI tasks.
 - `pp_ui_core` consumes vcpkg tinyxml2 only when `PP_USE_VCPKG_TINYXML2=ON`
   through the vcpkg preset; default and Android validation still use the
   retained vendored fallback tracked by DEBT-0012.

docs/modernization/roadmap.md

@@ -332,6 +332,8 @@ the paint blend reference. `pp_ui_core` has started with XML-layout-facing
 length parsing, color parsing, tinyxml-backed layout XML parsing, and invalid
 input tests.
 `pano_cli inspect-image` exposes PNG IHDR metadata as JSON,
+`pano_cli import-image` accepts a PNG path and imports decoded RGBA8 pixels
+into a new pure `pp_document` face payload,
 `pano_cli inspect-project` reports validated PPI thumbnail/body byte layout,
 body summary, layer/frame descriptors, dirty-face PNG payload metadata, and
 asset-level decode coverage, and
@@ -702,6 +704,9 @@ Results:
   test.
 - `pano_cli_inspect_png_metadata_smoke` passed and reports PNG metadata JSON
   for the tiny IHDR fixture.
+- `pano_cli_import_image_rejects_truncated_png` passed as an expected failure
+  test, proving the file-driven image import command rejects a metadata-valid
+  but undecodable PNG payload.
 - `pano_cli_inspect_project_layout_smoke` passed and reports PPI
   thumbnail/body byte layout, body summary, layer/frame descriptors, and
   dirty-face PNG payload metadata JSON.
@@ -767,7 +772,11 @@ Results:
   agent automation.
 - `pano_cli simulate-image-import` exercises embedded PNG decode through
   `pp_assets` and `pp_document` face-payload attachment through JSON
-  automation. Full file import/export remains a future `pano_cli` task.
+  automation.
+- `pano_cli import-image` accepts a PNG file path, decodes RGBA8 pixels through
+  `pp_assets`, attaches them to a pure `pp_document` face payload, and has a
+  truncated-PNG rejection smoke test. A checked-in decodable image fixture and
+  full export/round-trip automation remain future `pano_cli` tasks.
 - PowerShell package-smoke wrapper validates the Windows CMake app executable
   and runtime `data/` copy.
 - Android arm64 configured with NDK 29.0.14206865 through the platform-build