/api/slide-rank — read + write per-slide classifier state into the consumer's audits file

Dev-only GET/POST over `data/audits/slides.json` — `'pending'` is never persisted; posting it deletes the entry. 404s in production builds.