feat(tutorial): add /tutorial/update — echo step + persist to viewer

POST /tutorial/update echoes tutorial_step back and saves it to
Viewer.MissionData.TutorialState. is_skip=1 is handled server-side
by honoring whatever tutorial_step value the client sends (client
already sends 100 when skipping). Adds TutorialUpdateRequest DTO,
TutorialUpdateResponse DTO, injects SVSimDbContext into
TutorialController, and adds GetViewerTutorialStateAsync helper to
SVSimTestFactory.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

SVSim.EmulatedEntrypoint/Controllers/TutorialController.cs

@@ -1,5 +1,8 @@
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using SVSim.Database;
 using SVSim.EmulatedEntrypoint.Models.Dtos.Requests.Tutorial;
+using SVSim.EmulatedEntrypoint.Models.Dtos.Responses.Tutorial;
 
 namespace SVSim.EmulatedEntrypoint.Controllers;
 
@@ -9,6 +12,13 @@ namespace SVSim.EmulatedEntrypoint.Controllers;
 /// </summary>
 public class TutorialController : SVSimController
 {
+    private readonly SVSimDbContext _db;
+
+    public TutorialController(SVSimDbContext db)
+    {
+        _db = db;
+    }
+
     [HttpPost("update_action")]
     public IActionResult UpdateAction([FromBody] TutorialUpdateActionRequest request)
     {
@@ -16,4 +26,19 @@ public class TutorialController : SVSimController
         // We still emit an empty object so the translation middleware has a `data` payload to wrap.
         return new JsonResult(new { });
     }
+
+    [HttpPost("update")]
+    public async Task<ActionResult<TutorialUpdateResponse>> Update([FromBody] TutorialUpdateRequest request)
+    {
+        if (!TryGetViewerId(out long viewerId)) return Unauthorized();
+
+        var viewer = await _db.Viewers
+            .Include(v => v.MissionData)
+            .FirstAsync(v => v.Id == viewerId);
+
+        viewer.MissionData.TutorialState = request.TutorialStep;
+        await _db.SaveChangesAsync();
+
+        return new TutorialUpdateResponse { TutorialStep = request.TutorialStep };
+    }
 }

SVSim.EmulatedEntrypoint/Models/Dtos/Requests/Tutorial/TutorialUpdateRequest.cs

@@ -0,0 +1,23 @@
+using System.Text.Json.Serialization;
+using MessagePack;
+using SVSim.EmulatedEntrypoint.Models.Dtos.Requests;
+
+namespace SVSim.EmulatedEntrypoint.Models.Dtos.Requests.Tutorial;
+
+/// <summary>
+/// <c>POST /tutorial/update</c> — client reports the step it is moving TO.
+/// Client task: <c>Wizard/TutorialUpdateTask.cs</c>.
+/// </summary>
+[MessagePackObject]
+public class TutorialUpdateRequest : BaseRequest
+{
+    /// <summary>The tutorial step the client is moving TO (0, 1, 11, 21, 31, 41, 100).</summary>
+    [JsonPropertyName("tutorial_step")]
+    [Key("tutorial_step")]
+    public int TutorialStep { get; set; }
+
+    /// <summary>0 = normal, 1 = user chose Skip Tutorial.</summary>
+    [JsonPropertyName("is_skip")]
+    [Key("is_skip")]
+    public int IsSkip { get; set; }
+}

SVSim.EmulatedEntrypoint/Models/Dtos/Responses/Tutorial/TutorialUpdateResponse.cs

@@ -0,0 +1,17 @@
+using System.Text.Json.Serialization;
+using MessagePack;
+
+namespace SVSim.EmulatedEntrypoint.Models.Dtos.Responses.Tutorial;
+
+/// <summary>
+/// Server echoes the new step. Capture confirms exact value mirror — no validation,
+/// no munging. <c>tutorial_replay_step</c> is in the spec as optional but the live capture
+/// never includes it; omit unless we observe a need.
+/// </summary>
+[MessagePackObject]
+public class TutorialUpdateResponse
+{
+    [JsonPropertyName("tutorial_step")]
+    [Key("tutorial_step")]
+    public int TutorialStep { get; set; }
+}