[FEAT] Upload images for failed device policy - BUGFIX

[github-actions]

This is an automated pull request to merge chas/upload-policy-images-v2 into dev.
It was created by the [Auto Pull Request] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
app	Ready	Preview, Comment	Jan 23, 2026 8:44pm
portal	Ready	Preview, Comment	Jan 23, 2026 8:44pm

[cursor]

PR Summary

Feature: policy evidence upload/preview

• Add PolicyImageUploadModal and preview flows to attach images for failed Fleet policies; UI integrates in FleetPolicyItem and employee device view uses shared PolicyItem.

Backend/API updates (org-scoped + secure)

• Update/create routes: POST /api/confirm-fleet-policy, GET /api/fleet-policy, and GET /api/get-image-url to require organizationId, validate membership, sign S3 URLs, enforce org key prefix, and handle S3 upload/delete of attachments.

Policy data aggregation

• Employee and org pages merge Fleet policy results from DB (attachments + final pass/fail) and add synthetic MDM Enabled policy on macOS devices; portal fetch uses ?organizationId=.

UI tweaks

• Replace inline policy rendering with PolicyItem; adjust pass state color to text-primary.

^{Written by Cursor Bugbot for commit f51e127. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}