feat: sync latest ARR implementation

.project-docs/50-evidence/topics/2026-07-31-company-detail-header-upload.md

@@ -0,0 +1,28 @@
+# Company-detail title and upload rail
+
+## Metadata
+
+- Date: 2026-07-31
+- Scope: `arr_web/static/index.html`, `arr_web/static/styles.css`, `tests/test_arr_web.py`
+- Change type: UI layout and explanatory affordance only
+- Business-data mutation: none
+
+## Behavior facts
+
+- The fixed generation scope is rendered beside `公司渠道明细` as `固定生成：LianTai、QBD、DY-AI-Easy-KB、FengRun、HanaTour` in a muted, small helper style.
+- The duplicate `固定生成公司` block under `生成报表` is removed; only the `报表月份` input remains in that generator control row.
+- `报表月份` is intentionally retained. The client uses it to calculate each C/O period and release state, query company history for the selected month, and submit `report_month` with a generation request.
+- `刷新任务` is intentionally retained. It rechecks health and reloads the current Excel source, review draft and company-generation history, then shows a toast; it does not start a report. Its `title` documents this read-only scope.
+- The month input has a non-intrusive `title` explaining that it selects the C/O report month and filters the generation records below.
+- The Excel upload rail is `min(100%, 760px)` on desktop with the 104px `提取并核对` action column; at the mobile breakpoint it becomes full-width and one column.
+
+## Verification
+
+- JavaScript syntax and HTML parser checks passed.
+- Focused suite: `28 tests`, `OK` (`tests.test_arr_web`, `tests.test_arr_web_company_reports`).
+- Full discovery: `348 tests`, `OK (skipped=10)`.
+- Isolated authenticated fake-server browser QA did not upload, extract, delete, activate or generate anything.
+- At 1280x720: source rail `760px`, dropzone `644px`, upload action `104px`, document scroll width `1280px`.
+- At 390x844: source rail/dropzone `324px`, single-column action, document scroll width `390px`; fixed-company helper wraps safely under the title.
+- Browser console warnings/errors: none.
+- Isolated QA server on port 8876 was stopped after verification; shared port 8766 was not changed during QA.