Scan-driven transfers and the event log

Every change of custody is a scan. The phone (or a fixed scanner) hits the bag's URL and the operator picks an action.

Common actions:
- **Receive** — take custody from a passenger or upstream carrier
- **Stage** — set down in a known holding area
- **Pick** — pull from staging for next leg
- **Transfer** — hand off to another operator or carrier
- **Deliver** — final handoff to the recipient (signature/photo capture optional)
- **Lost / Found** — flag for triage

Each scan writes an event with operator, timestamp, GPS (if granted), and any notes. The event log is append-only — corrections happen as new events ("Correction: previous Stage was Bay 3, not Bay 5"), never as edits.

Wally tool `luggage_postEvent` lets a staff member log an event from chat when scanning isn't possible ("Wally, mark bag #LX-4429 as delivered to guest in Room 312, signed by Jane").

Owners watching from the lookup URL see events appear in real time.