feat(organize/scan): transfer modes, seeding-safe relocation, inode dedup, incremental scanning

- Organizer: add move/copy/hardlink/symlink transfer modes (default move),
  per-request target_path/transfer_mode overrides, and honor organize.target_dir
  / organize.transfer_mode settings.
- keep_seeding (default on): escalate move->hardlink (cross-device->copy) so the
  qBittorrent source stays in place and continues seeding after organize.
- qBittorrent SetLocation + POST /downloads/relocate to migrate whole torrents
  while keeping them seeding.
- Scanner: FileID (device:inode) hardlink dedup to avoid duplicate recognition
  and double-counted storage; extract single-file ingest.
- Watcher: recursive watch + incremental per-file ingest/remove instead of full
  re-scan; periodic full library scan now gated behind scan.periodic_enabled
  (default off) to reduce disk wear.
- Telegram bot: handle callback_query in polling, declare allowed_updates in
  webhook, answer callbacks.
- Frontend: settings for transfer mode / keep_seeding / periodic scan; organize
  panel target dir + transfer mode overrides.
- Tests for transfer modes, organizer resolution, SetLocation, inode dedup,
  incremental ingest/remove.

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

internal/service/telegram_bot_user_test.go

@@ -1,6 +1,7 @@
 package service
 
 import (
+	"encoding/json"
 	"strings"
 	"testing"
 
@@ -9,6 +10,77 @@ import (
 	"github.com/ShukeBta/MediaStationGo/internal/model"
 )
 
+func TestTelegramUpdateActionableDispatchesCallbackQuery(t *testing.T) {
+	if !telegramUpdateActionable(TelegramUpdate{CallbackQuery: &TelegramCallbackQuery{Data: "adult_toggle"}}) {
+		t.Fatal("callback_query update must be dispatched, otherwise inline buttons break")
+	}
+	if !telegramUpdateActionable(TelegramUpdate{Message: &TelegramMessage{Text: "/help"}}) {
+		t.Fatal("text command message must be dispatched")
+	}
+	if telegramUpdateActionable(TelegramUpdate{}) {
+		t.Fatal("empty update must be skipped")
+	}
+	if telegramUpdateActionable(TelegramUpdate{Message: &TelegramMessage{}}) {
+		t.Fatal("message without text must be skipped")
+	}
+}
+
+func TestTelegramCallbackTogglesAdultVisibility(t *testing.T) {
+	ctx := t.Context()
+	repos, auth, _, _ := newAuthTestServices(t)
+	user, _, err := auth.Register(ctx, "viewer", "secret-pass")
+	if err != nil {
+		t.Fatalf("register user: %v", err)
+	}
+	if err := repos.DB.Create(&model.TelegramBinding{
+		TelegramUserID: 30001,
+		TelegramName:   "@viewer",
+		ChatID:         30001,
+		UserID:         user.ID,
+	}).Error; err != nil {
+		t.Fatalf("create binding: %v", err)
+	}
+	if err := repos.DB.AutoMigrate(&model.NotifyChannel{}); err != nil {
+		t.Fatalf("migrate notify_channels: %v", err)
+	}
+	// 配置一个绑定该 Telegram 用户的渠道（无 bot_token，避免测试触发网络请求）。
+	cfg, _ := json.Marshal(map[string]string{"admin_user_ids": "30001"})
+	if err := repos.DB.Create(&model.NotifyChannel{
+		Name:    "Telegram",
+		Type:    "telegram",
+		Enabled: true,
+		Config:  string(cfg),
+	}).Error; err != nil {
+		t.Fatalf("create channel: %v", err)
+	}
+
+	before, err := repos.User.FindByID(ctx, user.ID)
+	if err != nil || before == nil {
+		t.Fatalf("load user before toggle: %v", err)
+	}
+
+	bot := NewTelegramBotService(zap.NewNop(), repos, nil)
+	update, _ := json.Marshal(TelegramUpdate{
+		UpdateID: 1,
+		CallbackQuery: &TelegramCallbackQuery{
+			ID:      "cb1",
+			From:    TelegramUser{ID: 30001, Username: "viewer", FirstName: "Viewer"},
+			Message: &TelegramMessage{MessageID: 5, Chat: TelegramChat{ID: 30001, Type: "private"}},
+			Data:    "adult_toggle",
+		},
+	})
+	// reply 因 bot_token 为空会返回错误，但成人目录状态应已在数据库中被切换。
+	_ = bot.HandleWebhook(ctx, update)
+
+	updated, err := repos.User.FindByID(ctx, user.ID)
+	if err != nil || updated == nil {
+		t.Fatalf("reload user: %v", err)
+	}
+	if updated.HideAdult == before.HideAdult {
+		t.Fatalf("adult_toggle callback should have flipped HideAdult (was %v)", before.HideAdult)
+	}
+}
+
 func TestTelegramStartClearsStaleUserBinding(t *testing.T) {
 	repos, _, _, _ := newAuthTestServices(t)
 	if err := repos.DB.Create(&model.TelegramBinding{