Add file-driven image import automation

docs/modernization/roadmap.md

@@ -332,6 +332,8 @@ the paint blend reference. `pp_ui_core` has started with XML-layout-facing
 length parsing, color parsing, tinyxml-backed layout XML parsing, and invalid
 input tests.
 `pano_cli inspect-image` exposes PNG IHDR metadata as JSON,
+`pano_cli import-image` accepts a PNG path and imports decoded RGBA8 pixels
+into a new pure `pp_document` face payload,
 `pano_cli inspect-project` reports validated PPI thumbnail/body byte layout,
 body summary, layer/frame descriptors, dirty-face PNG payload metadata, and
 asset-level decode coverage, and
@@ -702,6 +704,9 @@ Results:
   test.
 - `pano_cli_inspect_png_metadata_smoke` passed and reports PNG metadata JSON
   for the tiny IHDR fixture.
+- `pano_cli_import_image_rejects_truncated_png` passed as an expected failure
+  test, proving the file-driven image import command rejects a metadata-valid
+  but undecodable PNG payload.
 - `pano_cli_inspect_project_layout_smoke` passed and reports PPI
   thumbnail/body byte layout, body summary, layer/frame descriptors, and
   dirty-face PNG payload metadata JSON.
@@ -767,7 +772,11 @@ Results:
   agent automation.
 - `pano_cli simulate-image-import` exercises embedded PNG decode through
   `pp_assets` and `pp_document` face-payload attachment through JSON
-  automation. Full file import/export remains a future `pano_cli` task.
+  automation.
+- `pano_cli import-image` accepts a PNG file path, decodes RGBA8 pixels through
+  `pp_assets`, attaches them to a pure `pp_document` face payload, and has a
+  truncated-PNG rejection smoke test. A checked-in decodable image fixture and
+  full export/round-trip automation remain future `pano_cli` tasks.
 - PowerShell package-smoke wrapper validates the Windows CMake app executable
   and runtime `data/` copy.
 - Android arm64 configured with NDK 29.0.14206865 through the platform-build