fix(fusion_clock): kiosk photo now shows on clock + profile (right image fields)

Root-caused on live entech (not guessed):
- The kiosk runs as a non-HR operator (uid 141) who gets AccessError reading
  hr.employee images, so /web/image served a placeholder. Point the result-card
  avatar at hr.employee.public/avatar_128 — verified readable as the operator,
  returns the real photo. (Odoo's own UI uses .public for employee images.)
- The Odoo profile/preferences avatar is res.users → res.partner.image_1920,
  which the capture never wrote. Propagate the captured photo to the linked
  user's partner image so the profile updates too.
- Enlarge the capture oval (it was small): stage 62vh/520px, guide width 64%.

Live as 19.0.3.11.4. Also backfilled the existing test photo to the user's
partner image so the profile shows it without re-capturing.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

fusion_clock/static/src/scss/nfc_kiosk.scss

@@ -684,8 +684,8 @@ html:has(#nfc_kiosk_root) {
 .nfc-photo-stage {
     position: relative;
     aspect-ratio: 3 / 4;     // portrait — width follows the (height-driven) box
-    height: 56vh;
-    max-height: 440px;
+    height: 62vh;
+    max-height: 520px;
     max-width: 100%;
     margin: 0 auto;
     border-radius: 1rem;
@@ -706,7 +706,7 @@ html:has(#nfc_kiosk_root) {
     position: absolute;
     top: 47%;
     left: 50%;
-    width: 54%;
+    width: 64%;
     aspect-ratio: 3 / 4;     // VERTICAL oval — a face is taller than it is wide
     transform: translate(-50%, -50%);
     border: 3px dashed rgba(255, 255, 255, 0.92);