fix: single-photo analyze now looks up 5+ digit matches in canteen DB instead of showing warning

When OCR finds 5+ digits (match_5plus) but no 5-6 pattern, the frontend
now extracts the first 5 digits as the candidate machine ID, shows it,
and calls lookupAsset() to check the canteen DB — same behavior as the
5dash6 path. Eliminates the confusing '(no 5-6 pattern)' message.

cert.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----