Add file-driven image import automation

docs/modernization/build-inventory.md

@@ -98,6 +98,10 @@ Known local toolchain state:
   capability coverage, UI color parsing, and layout XML parse coverage.
 - `pano_cli inspect-image` reports PNG IHDR metadata as JSON and is covered by
   `pano_cli_inspect_png_metadata_smoke` with a tiny IHDR fixture.
+- `pano_cli import-image` accepts a PNG path, decodes RGBA8 pixels through
+  `pp_assets`, attaches them to a pure `pp_document` face payload, and is
+  covered for metadata-valid truncated PNG rejection by
+  `pano_cli_import_image_rejects_truncated_png`.
 - `pano_cli inspect-project` reports validated PPI thumbnail/body byte layout,
   body summary fields, layer/frame descriptors, and dirty-face PNG payload
   metadata, and is covered by `pano_cli_inspect_project_layout_smoke` with a
@@ -262,8 +266,11 @@ Known local toolchain state:
   automation and is covered by `pano_cli_simulate_document_edits_smoke`.
 - `pano_cli simulate-image-import` exposes embedded PNG decode and document
   face-payload attachment through JSON automation and is covered by
-  `pano_cli_simulate_image_import_smoke`; full file import/export remains a
-  future CLI automation task.
+  `pano_cli_simulate_image_import_smoke`.
+- `pano_cli import-image` exposes file-driven PNG decode and document
+  face-payload attachment through JSON automation and is covered by
+  `pano_cli_import_image_rejects_truncated_png`; a checked-in decodable image
+  fixture and export/round-trip automation remain future CLI tasks.
 - `pp_ui_core` consumes vcpkg tinyxml2 only when `PP_USE_VCPKG_TINYXML2=ON`
   through the vcpkg preset; default and Android validation still use the
   retained vendored fallback tracked by DEBT-0012.