feat(post-form): U4 — Draft badge + owner Edit/Delete controls on cards

Render on each journal card, gated by owner_can_edit (R1/R3/R5/R6, KTD8):
- Draft badge (amber) when the entry is unpublished.
- Edit link -> /post?edit=<route>&return=<feed-url> (D5: a save from the home
  feed returns to home, not always the trip page); feed_return_url threaded from
  trip.html.twig/home.html.twig (page.url).
- Delete control with inline Cancel/Confirm button-swap (no browser dialog),
  data-entry-route carried for U6's delete JS, plus an aria-live status slot.
- 44x44px min tap targets (D8); titlerow wraps on narrow phones.

Verified on the container: anon sees no controls/badge; owner sees Edit+Delete on
all 13 cards with a Draft badge on the unpublished one; a non-owner authenticated
session (testrunner vs owner mischa) sees none and no drafts (V5). Browser
screenshot verification unavailable (no local Playwright); did a code-level
layout review instead.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H1FrCYNq6RXdGYbn5PFrhM

themes/intotheeast/css/style.css

@@ -269,6 +269,87 @@ body::after {
     gap: var(--space-1);
 }
 
+/* ── Owner card controls (U4): Draft badge + Edit/Delete ─────────────────── */
+.journal-post-titlerow {
+    display: flex;
+    align-items: flex-start;
+    justify-content: space-between;
+    flex-wrap: wrap;                 /* phone-first: actions wrap below a long title */
+    gap: var(--space-2) var(--space-3);
+    margin-bottom: var(--space-2);
+}
+.journal-post-titlerow .journal-post-title { margin-bottom: 0; }
+
+.journal-draft-badge {
+    display: inline-block;
+    vertical-align: middle;
+    margin-left: var(--space-2);
+    font-family: var(--font-sans);
+    font-size: 0.6875rem;
+    font-weight: 700;
+    letter-spacing: 0.09em;
+    text-transform: uppercase;
+    color: #E0A458;                 /* warm amber — draft/unpublished */
+    border: 1px solid #E0A458;
+    border-radius: var(--radius-sm);
+    padding: 0.1em 0.5em;
+    line-height: 1.5;
+    white-space: nowrap;
+}
+
+.journal-post-actions {
+    display: flex;
+    align-items: center;
+    gap: var(--space-2);
+    flex-wrap: wrap;
+    flex-shrink: 0;
+}
+.entry-action {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 44px;               /* D8 — phone-first tap target */
+    min-width: 44px;
+    padding: 0 var(--space-3);
+    font-family: var(--font-sans);
+    font-size: var(--text-xs);
+    font-weight: 600;
+    letter-spacing: 0.04em;
+    border-radius: var(--radius-sm);
+    border: 1px solid var(--color-border);
+    background: transparent;
+    color: var(--color-ink-2);
+    text-decoration: none;
+    cursor: pointer;
+    transition: background .15s, color .15s, border-color .15s;
+}
+.entry-action:hover,
+.entry-action:focus-visible {
+    border-color: var(--color-accent);
+    color: var(--color-accent);
+    outline: none;
+}
+.entry-action--confirm {
+    color: #E5786A;                 /* soft red — destructive confirm */
+    border-color: #E5786A;
+}
+.entry-action--confirm:hover,
+.entry-action--confirm:focus-visible {
+    background: #E5786A;
+    color: var(--color-ink-inverse);
+}
+.entry-delete-confirm {
+    display: inline-flex;
+    align-items: center;
+    gap: var(--space-2);
+}
+.entry-delete-confirm[hidden] { display: none; }
+.entry-delete-msg {
+    font-size: var(--text-xs);
+    color: #E5786A;
+}
+.entry-delete-msg:empty { display: none; }
+
 .journal-photo-wrap {
     position: relative;
     margin-bottom: var(--space-5);

themes/intotheeast/templates/home.html.twig

@@ -97,7 +97,8 @@
             gpx_urls: home_gpx_urls,
             gps_points: gps_points,
             show_sort: false,
-            owner_can_edit: owner_can_edit
+            owner_can_edit: owner_can_edit,
+            feed_return_url: page.url
         } only %}
     {% endif %}
 </div>

themes/intotheeast/templates/partials/entry-journal.html.twig

@@ -1,7 +1,22 @@
 {% include 'partials/weather-icons.html.twig' %}
-<article class="journal-post" id="entry-{{ entry.slug }}" data-type="journal" data-lat="{{ entry.header.lat }}" data-lng="{{ entry.header.lng }}">
+{% set owner_can_edit = owner_can_edit ?? false %}
+{% set feed_return_url = feed_return_url ?? trip_page.url ?? '/' %}
+<article class="journal-post{% if not entry.published %} is-draft{% endif %}" id="entry-{{ entry.slug }}" data-type="journal" data-lat="{{ entry.header.lat }}" data-lng="{{ entry.header.lng }}"{% if owner_can_edit %} data-entry-route="{{ entry.route }}"{% endif %}>
     <header class="journal-post-header">
-        <h2 class="journal-post-title">{{ entry.title }}</h2>
+        <div class="journal-post-titlerow">
+            <h2 class="journal-post-title">{{ entry.title }}{% if not entry.published %} <span class="journal-draft-badge">Draft</span>{% endif %}</h2>
+            {% if owner_can_edit %}
+            <div class="journal-post-actions" data-entry-route="{{ entry.route }}">
+                <a class="entry-action entry-action--edit" href="/post?edit={{ entry.route|url_encode }}&return={{ feed_return_url|url_encode }}">Edit</a>
+                <button class="entry-action entry-action--delete" type="button" data-delete-start>Delete</button>
+                <span class="entry-delete-confirm" hidden>
+                    <button class="entry-action entry-action--cancel" type="button" data-delete-cancel>Cancel</button>
+                    <button class="entry-action entry-action--confirm" type="button" data-delete-confirm>Confirm delete</button>
+                </span>
+                <span class="entry-delete-msg" role="status" aria-live="polite"></span>
+            </div>
+            {% endif %}
+        </div>
         <p class="journal-post-meta">
             <a class="journal-post-permalink" href="{{ entry.url }}">
                 <time datetime="{{ entry.date|date('Y-m-d') }}">{{ entry.date|date('d M Y')|upper }}</time>

themes/intotheeast/templates/trip.html.twig

@@ -93,7 +93,8 @@
         gpx_urls: gpx_urls,
         gps_points: gps_points,
         show_sort: true,
-        owner_can_edit: owner_can_edit
+        owner_can_edit: owner_can_edit,
+        feed_return_url: page.url
     } only %}
 </div>