feat: downloads, RSS, subtitles, Bangumi, watcher, stats, profile, audit

Backend
  - service/bangumi.go: Bangumi (bgm.tv) scraper for anime libraries.
  - service/episode_parser.go: SxxExx / NxE / EPxx / 第NN集 parser with
    unit tests; consumed by the scanner for tv/anime libraries.
  - service/scraper.go: provider chain orchestrator picks Bangumi for
    anime libraries (TMDb fallback), TMDb for everything else; emits
    'no_match' rows so we don't retry forever; AnyEnabled() for the
    scanner kick.
  - service/scanner.go: writes season/episode numbers for tv/anime libs
    and reports a 'probed' counter alongside 'added'.
  - service/transcoder.go (existing): unchanged, stays per-media.
  - service/subtitle.go: discovers external subtitles next to the source
    file (.srt/.vtt/.ass/.ssa) and converts SRT/ASS to WebVTT on the fly.
  - service/qbittorrent.go: thread-safe qBittorrent v2 Web UI client
    (login / add / list / delete) with cookie-jar reuse.
  - service/downloads.go: persists download tasks, reads runtime
    qbittorrent.* settings, polls /torrents/info every 5 s and pushes
    the result to WS subscribers ('download' topic).
  - service/subscription.go: 10-minute RSS poller with regex filter,
    GUID dedup persisted in the settings table, and 'subscription' WS
    events on enqueue.
  - service/watcher.go: fsnotify watcher with 5 s coalescing debouncer
    that triggers per-library rescans on create/rename/remove.
  - service/stats.go: dashboard snapshot — totals, recently added,
    gopsutil-driven CPU/mem/disk readings.
  - service/profile.go: non-credential profile patch + admin role mutator.
  - service/audit.go: best-effort writer for the access_logs table.
  - service/service.go: container wires every new service; Boot() spins
    up watcher / downloads poller / subscription scheduler; Close()
    tears them down on graceful shutdown.

Handlers
  - new files: downloads.go, subscriptions.go, subtitles.go, series.go,
    stats.go, profile.go, util.go.
  - handler.go: registers PATCH /me, /libraries/:id/seasons,
    /media/:id/subtitles, /subtitles/:id, /downloads*, /subscriptions*,
    /stats, /admin/users/:id/role.
  - auth.go / media.go: write audit rows for login + library CRUD and
    refresh the watcher when libraries change.

Frontend
  - api: new helpers for downloads, subscriptions, profile, series, stats,
    subtitles; library helper gained scrape().
  - hooks/useWebSocket.ts: shared connection with 3 s reconnect.
  - components/GlobalEvents.tsx: surfaces scan / scrape / subscription
    completion as toasts (mounted at app root).
  - pages: Library now switches to a season-grouped layout for tv/anime
    libraries; Player attaches WebVTT <track> elements; new pages for
    Downloads (live torrent table), Subscriptions, Profile, Stats.
  - components/Layout.tsx + App.tsx: sidebar groups (媒体库 / 自动化 /
    账号 / 管理) and routes for the new pages; /stats and /admin remain
    admin-only.
  - types/index.ts: new types — Subscription, DownloadTask, QBitTorrent,
    Hardware, StatsSnapshot.

Verified: go build, go vet, go test (incl. ParseEpisode + srtToVTT +
stripASSTags) all pass; tsc -b && vite build emits 17 route chunks plus
the deferred hls chunk; main bundle 247 KB / 83 KB gzipped.

web/src/pages/ProfilePage.tsx

@@ -0,0 +1,114 @@
+import { FormEvent, useState } from 'react'
+import toast from 'react-hot-toast'
+import { KeyRound, Save } from 'lucide-react'
+
+import { authAPI } from '../api/auth'
+import { profileAPI } from '../api/profile'
+import { useAuthStore } from '../stores/auth'
+
+export function ProfilePage() {
+  const user = useAuthStore((s) => s.user)
+  const setUser = useAuthStore((s) => s.setUser)
+
+  const [email, setEmail] = useState(user?.email ?? '')
+  const [avatar, setAvatar] = useState(user?.avatar_url ?? '')
+  const [oldPwd, setOldPwd] = useState('')
+  const [newPwd, setNewPwd] = useState('')
+
+  const onProfile = async (e: FormEvent) => {
+    e.preventDefault()
+    try {
+      const u = await profileAPI.update({ email, avatar_url: avatar })
+      setUser(u)
+      toast.success('资料已更新')
+    } catch {
+      toast.error('保存失败')
+    }
+  }
+
+  const onPwd = async (e: FormEvent) => {
+    e.preventDefault()
+    try {
+      await authAPI.changePassword(oldPwd, newPwd)
+      toast.success('密码已更新')
+      setOldPwd('')
+      setNewPwd('')
+    } catch (err: unknown) {
+      const msg =
+        (err as { response?: { data?: { error?: string } } })?.response?.data?.error ??
+        '密码更新失败'
+      toast.error(msg)
+    }
+  }
+
+  return (
+    <div className="space-y-6">
+      <h1 className="font-display text-3xl font-bold text-white">个人资料</h1>
+
+      <form onSubmit={onProfile} className="glass-panel space-y-4">
+        <h2 className="font-display text-lg font-semibold text-white">基本信息</h2>
+        <Field label="用户名">
+          <input className="input-base" value={user?.username ?? ''} disabled />
+        </Field>
+        <Field label="角色">
+          <input className="input-base" value={user?.role ?? ''} disabled />
+        </Field>
+        <Field label="电子邮箱">
+          <input
+            type="email"
+            className="input-base"
+            value={email}
+            onChange={(e) => setEmail(e.target.value)}
+          />
+        </Field>
+        <Field label="头像 URL">
+          <input
+            className="input-base"
+            value={avatar}
+            onChange={(e) => setAvatar(e.target.value)}
+          />
+        </Field>
+        <button type="submit" className="neon-button">
+          <Save size={16} /> 保存
+        </button>
+      </form>
+
+      <form onSubmit={onPwd} className="glass-panel space-y-4">
+        <h2 className="font-display text-lg font-semibold text-white">修改密码</h2>
+        <Field label="当前密码">
+          <input
+            required
+            type="password"
+            className="input-base"
+            value={oldPwd}
+            onChange={(e) => setOldPwd(e.target.value)}
+            autoComplete="current-password"
+          />
+        </Field>
+        <Field label="新密码">
+          <input
+            required
+            type="password"
+            className="input-base"
+            minLength={6}
+            value={newPwd}
+            onChange={(e) => setNewPwd(e.target.value)}
+            autoComplete="new-password"
+          />
+        </Field>
+        <button type="submit" className="neon-button">
+          <KeyRound size={16} /> 更新密码
+        </button>
+      </form>
+    </div>
+  )
+}
+
+function Field({ label, children }: { label: string; children: React.ReactNode }) {
+  return (
+    <label className="block">
+      <span className="mb-1 block text-sm text-slate-300">{label}</span>
+      {children}
+    </label>
+  )
+}