feat: ffprobe + TMDb scrape + HLS transcode + history/favourites/playlists

Backend
  - service/ffprobe.go: thin ffprobe wrapper, parses duration / resolution /
    codecs into a typed ProbeResult. 30s per-file timeout.
  - service/tmdb.go: minimal TMDb provider (search/movie). Disabled when no
    api key; supports tmdb_api_proxy / tmdb_image_proxy overrides for users
    behind a firewall.
  - service/scraper.go: filename cleaner (handles bracketed tags, scene
    noise tokens, year extraction), per-row + per-library enrichment with a
    4 RPS throttle and WS hub progress events. Unit-tested.
  - service/scanner.go: now invokes ffprobe per file and kicks the TMDb
    scraper in the background once a library scan finishes.
  - service/transcoder.go: per-media ffmpeg HLS job manager; outputs
    index.m3u8 + seg_NNNNN.ts under cache/hls/<id>; cancels jobs on
    shutdown; publishes 'transcode' WS events.
  - service/stream.go: serves HLS playlist (with 30s wait-for-ready) and
    .ts segments with path-traversal protection. Adds Probe() helper used
    by the admin 'reprobe' button.
  - service/image_proxy.go: cached, host-allow-listed reverse proxy for
    TMDb / Bangumi / Douban / Fanart / TheTVDB images so the SPA never
    hits a CORS or GFW issue.
  - service/playback.go: history upsert, favourites toggle, playlist CRUD
    + ordered items. RecentHistory joins with model.Media in one extra
    query so the home page can render a 'Continue Watching' row.
  - handler/streaming.go + handler/playback.go: REST endpoints for HLS,
    image proxy, scrape (one + library), reprobe, history, favourites,
    playlists.
  - handler/handler.go: registers /api/hls/:id/{index.m3u8,:seg}, /api/img,
    /api/history, /api/favourites/:id, /api/playlists/* with proper
    auth/admin guards.

Frontend
  - api/client.ts: imageURL() helper; hlsURL() endpoint; reuses the JWT in
    a query parameter for <video src> and <img src>.
  - api/playback.ts: typed helpers for history, favourites, playlists.
  - components/MediaCard.tsx: optional 'progress' prop renders a thin
    bottom progress bar, used by the new Continue Watching row.
  - pages/HomePage.tsx: two rows (Continue Watching + Recently Added);
    falls back to the empty-state hint when both are empty.
  - pages/PlayerPage.tsx: hls.js (lazy-imported) with auto-fallback to
    direct play; ?mode=hls|direct query toggle; resume position written
    every 10s while playing.
  - pages/MediaDetailPage.tsx: heart toggle + admin 'rescrape' / 'reprobe'
    buttons + dedicated 'HLS 转码播放' CTA.
  - pages/FavouritesPage.tsx, PlaylistsPage.tsx, PlaylistDetailPage.tsx:
    new screens.
  - components/Layout.tsx + App.tsx: sidebar links for Favourites and
    Playlists; routes are now lazily code-split via React.lazy + Suspense
    so the initial bundle stays at ~243 KB / 82 KB gzipped (hls.js is
    fetched only on first HLS playback).

Verified: go build, go vet, go test (incl. CleanQuery cases) all pass;
frontend tsc -b && vite build emits 9 route chunks plus a deferred hls
chunk.

internal/service/service.go

@@ -14,34 +14,56 @@ import (
 // Container holds every service initialized at startup. Handlers receive a
 // pointer to it and pick the relevant fields.
 type Container struct {
-	Cfg    *config.Config
-	Log    *zap.Logger
-	Repo   *repository.Container
-	WSHub  *Hub
-	Auth   *AuthService
-	Media  *MediaService
-	Scan   *ScannerService
-	Stream *StreamService
+	Cfg        *config.Config
+	Log        *zap.Logger
+	Repo       *repository.Container
+	WSHub      *Hub
+	Auth       *AuthService
+	Media      *MediaService
+	Scan       *ScannerService
+	Stream     *StreamService
+	Transcoder *TranscoderService
+	FFprobe    *FFprobeService
+	TMDb       *TMDbProvider
+	Scraper    *ScraperService
+	Playback   *PlaybackService
+	ImageProxy *ImageProxy
 }
 
 // New builds the service container.
 func New(cfg *config.Config, log *zap.Logger, repos *repository.Container) *Container {
 	hub := NewHub(log)
 	go hub.Run()
+
+	probe := NewFFprobeService(cfg, log)
+	tmdb := NewTMDbProvider(cfg, log)
+	scraper := NewScraperService(cfg, log, repos, tmdb, hub)
+	transcoder := NewTranscoderService(cfg, log, repos, hub)
+
 	return &Container{
-		Cfg:    cfg,
-		Log:    log,
-		Repo:   repos,
-		WSHub:  hub,
-		Auth:   NewAuthService(cfg, log, repos),
-		Media:  NewMediaService(cfg, log, repos),
-		Scan:   NewScannerService(cfg, log, repos, hub),
-		Stream: NewStreamService(cfg, log, repos),
+		Cfg:        cfg,
+		Log:        log,
+		Repo:       repos,
+		WSHub:      hub,
+		Auth:       NewAuthService(cfg, log, repos),
+		Media:      NewMediaService(cfg, log, repos),
+		Scan:       NewScannerService(cfg, log, repos, hub, probe, scraper),
+		Stream:     NewStreamService(cfg, log, repos, transcoder),
+		Transcoder: transcoder,
+		FFprobe:    probe,
+		TMDb:       tmdb,
+		Scraper:    scraper,
+		Playback:   NewPlaybackService(log, repos),
+		ImageProxy: NewImageProxy(cfg, log),
 	}
 }
 
-// Close releases any resources held by services (e.g. the websocket hub).
+// Close releases any resources held by services (websocket hub, ffmpeg
+// transcodes).
 func (c *Container) Close() {
+	if c.Transcoder != nil {
+		c.Transcoder.StopAll()
+	}
 	if c.WSHub != nil {
 		c.WSHub.Stop()
 	}