- Transport entries carry an optional ordered waypoints array of
lat/lng/name points; /route attaches them to the ground leg the
transport bridges, and /api/directions accepts a via param so the
drawn road route detours through them
- Day editor gains a geocoded "Scenic waypoints" list on transport
entries; the map draws leg-coloured waypoint dots
- Escape waypoint names in the Leaflet tooltip (stored-XSS fix flagged
by security review: names are user-typed and Leaflet renders string
tooltips as HTML)
