tighten the remaining voice outline review items

- One place-name key for server and tiles, so "St. Paul" and "Saint Paul"
  agree in Nominatim name checks.
- Tile street names: a lone letter is a direction only beside another name
  word ("E Street" is not "East Street"), and a trailing quadrant ("E St NW")
  may go unsaid in the ask.
- A building cut at the tile edge that is nearer the point than any whole
  one leaves the point instead of a farther neighbour standing in; an edge
  without a tile buffer counts as a cut, so a cut area never answers grounds.
- A batch building install re-judges only results that installed; a late
  timeout during caption conversion keeps the pending point drawn; a failed
  plain recaption keeps the old mark addressable.
- An interrupted Nominatim dispatch is reclaimed by the next lock owner ten
  minutes after the start its marker names; node:sqlite loads on first use
  without its experimental warning.
- PHOTON_URL accepts only https, which the page's connect-src allows.
- Shared OpenFreeMap tiles decode each layer when a consumer first selects
  it; outline selection reuses the shared ring area and simplification, and
  ground probes the shared ring centroid; the grounds word list lives once.

.env.example

@@ -283,11 +283,12 @@ OVERPASS_UPSTREAMS=
 # Public-instance pacing is shared through .gev-cache/nominatim/state.json. If
 # the server stopped mid-request (or its disk filled), it leaves a
 # state.json.dispatch.* marker and refuses public lookups ("unfinished durable
-# Nominatim dispatch") rather than risk breaking the spacing. With the server
-# stopped, delete those marker files to resume.
+# Nominatim dispatch") for ten minutes rather than risk breaking the spacing;
+# the next lookup after that removes the marker and resumes with fresh spacing.
 # PHOTON_URL: keyless place search endpoint used by the browser
 # (e.g. https://photon.example.org/api/). Unset uses photon.komoot.io; set it
-# empty to disable.
+# empty to disable. Only https endpoints are accepted (the page's
+# Content-Security-Policy allows no plain-http origin); any other value disables it.
 # PHOTON_URL=
 
 # Optional: who may frame the app in embed mode (?embed=1), as CSP