feat: downloads, RSS, subtitles, Bangumi, watcher, stats, profile, audit

Backend
  - service/bangumi.go: Bangumi (bgm.tv) scraper for anime libraries.
  - service/episode_parser.go: SxxExx / NxE / EPxx / 第NN集 parser with
    unit tests; consumed by the scanner for tv/anime libraries.
  - service/scraper.go: provider chain orchestrator picks Bangumi for
    anime libraries (TMDb fallback), TMDb for everything else; emits
    'no_match' rows so we don't retry forever; AnyEnabled() for the
    scanner kick.
  - service/scanner.go: writes season/episode numbers for tv/anime libs
    and reports a 'probed' counter alongside 'added'.
  - service/transcoder.go (existing): unchanged, stays per-media.
  - service/subtitle.go: discovers external subtitles next to the source
    file (.srt/.vtt/.ass/.ssa) and converts SRT/ASS to WebVTT on the fly.
  - service/qbittorrent.go: thread-safe qBittorrent v2 Web UI client
    (login / add / list / delete) with cookie-jar reuse.
  - service/downloads.go: persists download tasks, reads runtime
    qbittorrent.* settings, polls /torrents/info every 5 s and pushes
    the result to WS subscribers ('download' topic).
  - service/subscription.go: 10-minute RSS poller with regex filter,
    GUID dedup persisted in the settings table, and 'subscription' WS
    events on enqueue.
  - service/watcher.go: fsnotify watcher with 5 s coalescing debouncer
    that triggers per-library rescans on create/rename/remove.
  - service/stats.go: dashboard snapshot — totals, recently added,
    gopsutil-driven CPU/mem/disk readings.
  - service/profile.go: non-credential profile patch + admin role mutator.
  - service/audit.go: best-effort writer for the access_logs table.
  - service/service.go: container wires every new service; Boot() spins
    up watcher / downloads poller / subscription scheduler; Close()
    tears them down on graceful shutdown.

Handlers
  - new files: downloads.go, subscriptions.go, subtitles.go, series.go,
    stats.go, profile.go, util.go.
  - handler.go: registers PATCH /me, /libraries/:id/seasons,
    /media/:id/subtitles, /subtitles/:id, /downloads*, /subscriptions*,
    /stats, /admin/users/:id/role.
  - auth.go / media.go: write audit rows for login + library CRUD and
    refresh the watcher when libraries change.

Frontend
  - api: new helpers for downloads, subscriptions, profile, series, stats,
    subtitles; library helper gained scrape().
  - hooks/useWebSocket.ts: shared connection with 3 s reconnect.
  - components/GlobalEvents.tsx: surfaces scan / scrape / subscription
    completion as toasts (mounted at app root).
  - pages: Library now switches to a season-grouped layout for tv/anime
    libraries; Player attaches WebVTT <track> elements; new pages for
    Downloads (live torrent table), Subscriptions, Profile, Stats.
  - components/Layout.tsx + App.tsx: sidebar groups (媒体库 / 自动化 /
    账号 / 管理) and routes for the new pages; /stats and /admin remain
    admin-only.
  - types/index.ts: new types — Subscription, DownloadTask, QBitTorrent,
    Hardware, StatsSnapshot.

Verified: go build, go vet, go test (incl. ParseEpisode + srtToVTT +
stripASSTags) all pass; tsc -b && vite build emits 17 route chunks plus
the deferred hls chunk; main bundle 247 KB / 83 KB gzipped.

internal/service/service.go

@@ -5,6 +5,8 @@
 package service
 
 import (
+	"context"
+
 	"go.uber.org/zap"
 
 	"github.com/ShukeBta/MediaStationGo/internal/config"
@@ -14,20 +16,31 @@ import (
 // Container holds every service initialized at startup. Handlers receive a
 // pointer to it and pick the relevant fields.
 type Container struct {
-	Cfg        *config.Config
-	Log        *zap.Logger
-	Repo       *repository.Container
-	WSHub      *Hub
-	Auth       *AuthService
-	Media      *MediaService
-	Scan       *ScannerService
-	Stream     *StreamService
-	Transcoder *TranscoderService
-	FFprobe    *FFprobeService
-	TMDb       *TMDbProvider
-	Scraper    *ScraperService
-	Playback   *PlaybackService
-	ImageProxy *ImageProxy
+	Cfg          *config.Config
+	Log          *zap.Logger
+	Repo         *repository.Container
+	WSHub        *Hub
+	Auth         *AuthService
+	Media        *MediaService
+	Scan         *ScannerService
+	Stream       *StreamService
+	Transcoder   *TranscoderService
+	FFprobe      *FFprobeService
+	TMDb         *TMDbProvider
+	Bangumi      *BangumiProvider
+	Scraper      *ScraperService
+	Playback     *PlaybackService
+	ImageProxy   *ImageProxy
+	Watcher      *WatcherService
+	Downloads    *DownloadService
+	Subscription *SubscriptionService
+	Subtitle     *SubtitleService
+	Stats        *StatsService
+	Profile      *ProfileService
+	Audit        *AuditService
+
+	stopCtx    context.Context
+	stopCancel context.CancelFunc
 }
 
 // New builds the service container.
@@ -37,30 +50,69 @@ func New(cfg *config.Config, log *zap.Logger, repos *repository.Container) *Cont
 
 	probe := NewFFprobeService(cfg, log)
 	tmdb := NewTMDbProvider(cfg, log)
-	scraper := NewScraperService(cfg, log, repos, tmdb, hub)
+	bangumi := NewBangumiProvider(cfg, log)
+	scraper := NewScraperService(cfg, log, repos, tmdb, bangumi, hub)
 	transcoder := NewTranscoderService(cfg, log, repos, hub)
+	scanner := NewScannerService(cfg, log, repos, hub, probe, scraper)
+	downloads := NewDownloadService(log, repos, hub)
+	subscription := NewSubscriptionService(log, repos, downloads, hub)
+	watcher := NewWatcherService(log, repos, scanner)
+
+	ctx, cancel := context.WithCancel(context.Background())
 
 	return &Container{
-		Cfg:        cfg,
-		Log:        log,
-		Repo:       repos,
-		WSHub:      hub,
-		Auth:       NewAuthService(cfg, log, repos),
-		Media:      NewMediaService(cfg, log, repos),
-		Scan:       NewScannerService(cfg, log, repos, hub, probe, scraper),
-		Stream:     NewStreamService(cfg, log, repos, transcoder),
-		Transcoder: transcoder,
-		FFprobe:    probe,
-		TMDb:       tmdb,
-		Scraper:    scraper,
-		Playback:   NewPlaybackService(log, repos),
-		ImageProxy: NewImageProxy(cfg, log),
+		Cfg:          cfg,
+		Log:          log,
+		Repo:         repos,
+		WSHub:        hub,
+		Auth:         NewAuthService(cfg, log, repos),
+		Media:        NewMediaService(cfg, log, repos),
+		Scan:         scanner,
+		Stream:       NewStreamService(cfg, log, repos, transcoder),
+		Transcoder:   transcoder,
+		FFprobe:      probe,
+		TMDb:         tmdb,
+		Bangumi:      bangumi,
+		Scraper:      scraper,
+		Playback:     NewPlaybackService(log, repos),
+		ImageProxy:   NewImageProxy(cfg, log),
+		Watcher:      watcher,
+		Downloads:    downloads,
+		Subscription: subscription,
+		Subtitle:     NewSubtitleService(log, repos),
+		Stats:        NewStatsService(log, repos),
+		Profile:      NewProfileService(log, repos),
+		Audit:        NewAuditService(log, repos),
+		stopCtx:      ctx,
+		stopCancel:   cancel,
 	}
 }
 
+// Boot kicks off background workers (watcher, downloads poller,
+// subscription scheduler).  Called once after AutoMigrate.
+func (c *Container) Boot() {
+	if err := c.Watcher.Start(c.stopCtx); err != nil {
+		c.Log.Warn("watcher start failed", zap.Error(err))
+	}
+	c.Downloads.Start(c.stopCtx)
+	c.Subscription.Start(c.stopCtx)
+}
+
 // Close releases any resources held by services (websocket hub, ffmpeg
-// transcodes).
+// transcodes, fsnotify, background pollers).
 func (c *Container) Close() {
+	if c.stopCancel != nil {
+		c.stopCancel()
+	}
+	if c.Watcher != nil {
+		c.Watcher.Stop()
+	}
+	if c.Subscription != nil {
+		c.Subscription.Stop()
+	}
+	if c.Downloads != nil {
+		c.Downloads.Stop()
+	}
 	if c.Transcoder != nil {
 		c.Transcoder.StopAll()
 	}