feat: downloads, RSS, subtitles, Bangumi, watcher, stats, profile, audit

Backend
  - service/bangumi.go: Bangumi (bgm.tv) scraper for anime libraries.
  - service/episode_parser.go: SxxExx / NxE / EPxx / 第NN集 parser with
    unit tests; consumed by the scanner for tv/anime libraries.
  - service/scraper.go: provider chain orchestrator picks Bangumi for
    anime libraries (TMDb fallback), TMDb for everything else; emits
    'no_match' rows so we don't retry forever; AnyEnabled() for the
    scanner kick.
  - service/scanner.go: writes season/episode numbers for tv/anime libs
    and reports a 'probed' counter alongside 'added'.
  - service/transcoder.go (existing): unchanged, stays per-media.
  - service/subtitle.go: discovers external subtitles next to the source
    file (.srt/.vtt/.ass/.ssa) and converts SRT/ASS to WebVTT on the fly.
  - service/qbittorrent.go: thread-safe qBittorrent v2 Web UI client
    (login / add / list / delete) with cookie-jar reuse.
  - service/downloads.go: persists download tasks, reads runtime
    qbittorrent.* settings, polls /torrents/info every 5 s and pushes
    the result to WS subscribers ('download' topic).
  - service/subscription.go: 10-minute RSS poller with regex filter,
    GUID dedup persisted in the settings table, and 'subscription' WS
    events on enqueue.
  - service/watcher.go: fsnotify watcher with 5 s coalescing debouncer
    that triggers per-library rescans on create/rename/remove.
  - service/stats.go: dashboard snapshot — totals, recently added,
    gopsutil-driven CPU/mem/disk readings.
  - service/profile.go: non-credential profile patch + admin role mutator.
  - service/audit.go: best-effort writer for the access_logs table.
  - service/service.go: container wires every new service; Boot() spins
    up watcher / downloads poller / subscription scheduler; Close()
    tears them down on graceful shutdown.

Handlers
  - new files: downloads.go, subscriptions.go, subtitles.go, series.go,
    stats.go, profile.go, util.go.
  - handler.go: registers PATCH /me, /libraries/:id/seasons,
    /media/:id/subtitles, /subtitles/:id, /downloads*, /subscriptions*,
    /stats, /admin/users/:id/role.
  - auth.go / media.go: write audit rows for login + library CRUD and
    refresh the watcher when libraries change.

Frontend
  - api: new helpers for downloads, subscriptions, profile, series, stats,
    subtitles; library helper gained scrape().
  - hooks/useWebSocket.ts: shared connection with 3 s reconnect.
  - components/GlobalEvents.tsx: surfaces scan / scrape / subscription
    completion as toasts (mounted at app root).
  - pages: Library now switches to a season-grouped layout for tv/anime
    libraries; Player attaches WebVTT <track> elements; new pages for
    Downloads (live torrent table), Subscriptions, Profile, Stats.
  - components/Layout.tsx + App.tsx: sidebar groups (媒体库 / 自动化 /
    账号 / 管理) and routes for the new pages; /stats and /admin remain
    admin-only.
  - types/index.ts: new types — Subscription, DownloadTask, QBitTorrent,
    Hardware, StatsSnapshot.

Verified: go build, go vet, go test (incl. ParseEpisode + srtToVTT +
stripASSTags) all pass; tsc -b && vite build emits 17 route chunks plus
the deferred hls chunk; main bundle 247 KB / 83 KB gzipped.

web/src/pages/SubscriptionsPage.tsx

@@ -0,0 +1,130 @@
+import { FormEvent, useEffect, useState } from 'react'
+import toast from 'react-hot-toast'
+import { Play, Plus, Trash2 } from 'lucide-react'
+
+import { subscriptionsAPI } from '../api/subscriptions'
+import type { Subscription } from '../types'
+
+export function SubscriptionsPage() {
+  const [items, setItems] = useState<Subscription[]>([])
+  const [name, setName] = useState('')
+  const [feed, setFeed] = useState('')
+  const [filter, setFilter] = useState('')
+  const [loading, setLoading] = useState(true)
+
+  const refresh = () =>
+    subscriptionsAPI
+      .list()
+      .then(setItems)
+      .finally(() => setLoading(false))
+
+  useEffect(() => {
+    refresh().catch(() => undefined)
+  }, [])
+
+  const onCreate = async (e: FormEvent) => {
+    e.preventDefault()
+    try {
+      await subscriptionsAPI.create({ name, feed_url: feed, filter })
+      toast.success('已创建订阅')
+      setName('')
+      setFeed('')
+      setFilter('')
+      await refresh()
+    } catch (err: unknown) {
+      const msg =
+        (err as { response?: { data?: { error?: string } } })?.response?.data?.error ?? '创建失败'
+      toast.error(msg)
+    }
+  }
+
+  return (
+    <div className="space-y-6">
+      <h1 className="font-display text-3xl font-bold text-white">RSS 订阅</h1>
+      <p className="text-sm text-slate-400">
+        定期轮询 RSS 源(每 10 分钟一次),将匹配过滤器的项目自动加入下载队列。
+      </p>
+
+      <form onSubmit={onCreate} className="glass-panel grid gap-3 md:grid-cols-[1fr_1fr_1fr_auto]">
+        <input
+          required
+          className="input-base"
+          placeholder="名称(显示用)"
+          value={name}
+          onChange={(e) => setName(e.target.value)}
+        />
+        <input
+          required
+          className="input-base"
+          placeholder="RSS 地址"
+          value={feed}
+          onChange={(e) => setFeed(e.target.value)}
+        />
+        <input
+          className="input-base"
+          placeholder="过滤器(正则,可选)"
+          value={filter}
+          onChange={(e) => setFilter(e.target.value)}
+        />
+        <button type="submit" className="neon-button">
+          <Plus size={16} /> 添加
+        </button>
+      </form>
+
+      {loading && <p className="text-slate-500">加载中…</p>}
+      {!loading && items.length === 0 && <p className="text-slate-400">暂无订阅。</p>}
+
+      {items.length > 0 && (
+        <div className="glass-panel">
+          <table className="w-full text-left text-sm">
+            <thead className="text-xs uppercase tracking-wider text-slate-500">
+              <tr>
+                <th className="py-2">名称</th>
+                <th>RSS</th>
+                <th>过滤器</th>
+                <th>最近运行</th>
+                <th className="text-right">操作</th>
+              </tr>
+            </thead>
+            <tbody>
+              {items.map((s) => (
+                <tr key={s.id} className="border-t border-white/5">
+                  <td className="py-2 text-white">{s.name}</td>
+                  <td className="max-w-md truncate text-slate-300" title={s.feed_url}>
+                    {s.feed_url}
+                  </td>
+                  <td className="text-slate-300">{s.filter || '—'}</td>
+                  <td className="text-slate-500">
+                    {s.last_run_at ? new Date(s.last_run_at).toLocaleString() : '—'}
+                  </td>
+                  <td className="space-x-2 py-2 text-right">
+                    <button
+                      className="rounded border border-primary-400/40 px-2 py-1 text-xs text-primary-400 hover:bg-primary-400/10"
+                      onClick={async () => {
+                        const r = await subscriptionsAPI.runNow(s.id)
+                        toast.success(`已加入 ${r.queued} 项`)
+                      }}
+                    >
+                      <Play size={12} />
+                    </button>
+                    <button
+                      className="rounded border border-red-400/40 px-2 py-1 text-xs text-red-400 hover:bg-red-400/10"
+                      onClick={async () => {
+                        if (!confirm(`删除订阅「${s.name}」?`)) return
+                        await subscriptionsAPI.remove(s.id)
+                        toast.success('已删除')
+                        await refresh()
+                      }}
+                    >
+                      <Trash2 size={12} />
+                    </button>
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+    </div>
+  )
+}