feat(api): upload queue with quota, tus intake, processing and import (M5.5)

- Migration 00008: upload_batches, upload_files, upload_quota.
- Quota reserved under a row lock when a batch is created; every status
  change goes through one transition that frees space in the same
  transaction. SHA-256 duplicates are rejected before any upload.
- tus 1.0.0 core (HEAD/PATCH) for the author only; offset is the real
  staging file size, data beyond the declared size is refused (ADR-015).
- Processing worker: ffprobe checks, SHA-256 verification, exact and
  Chromaprint duplicates against library and queue, metadata from tags
  or the dropped folder path, possible_duplicate on metadata match, and
  the target path from write_template reusing existing folder spelling.
- Import worker: edited tags written with ffmpeg stream copy, file
  written by storage-agent, point scan of the new file, imported status;
  idempotent and resumed after restart. Stale uploads expire after 24 h,
  orphan staging files are removed at startup.
- API: quota, precheck, batches, my uploads, withdraw, admin list,
  metadata edit, bulk review, retry and queue settings.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

services/api/cmd/api/main.go

@@ -30,6 +30,7 @@ import (
 	"pipu/api/internal/search"
 	"pipu/api/internal/server"
 	"pipu/api/internal/system"
+	"pipu/api/internal/uploads"
 	"pipu/api/internal/wave"
 )
 
@@ -94,7 +95,8 @@ func run() error {
 	prober := library.FFprobe{Bin: cfg.FFprobePath, Timeout: time.Minute}
 	board := library.NewProgressBoard()
 	scanner := library.NewScanner(libStore, prober, board, log)
-	libSvc := library.NewService(libStore, scanner, board, library.NewHTTPAgent(cfg.StorageAgentURL, cfg.InternalToken),
+	agent := library.NewHTTPAgent(cfg.StorageAgentURL, cfg.InternalToken)
+	libSvc := library.NewService(libStore, scanner, board, agent,
 		prober, library.Config{LibraryRoot: cfg.LibraryRoot, HostRoot: cfg.LibraryHostRoot}, log)
 	meili := search.NewMeili(cfg.MeiliURL, cfg.MeiliMasterKey)
 	indexer := search.NewIndexer(pool, meili, log)
@@ -145,6 +147,11 @@ func run() error {
 	go libSvc.Restore(ctx)
 	go libSvc.RunSchedule(ctx)
 
+	upSvc := uploads.NewService(uploads.NewStore(pool), libStore, libSvc, scanner, agent, prober,
+		library.FPCalc{Bin: cfg.FPCalcPath, Timeout: time.Minute},
+		uploads.Config{StagingDir: cfg.UploadsDir, FFmpeg: cfg.FFmpegPath}, log)
+	upSvc.Run(ctx)
+
 	srv := httpx.NewServer(cfg.HTTPAddr, server.NewRouter(server.Deps{
 		Log:         log,
 		System:      sys,
@@ -157,6 +164,8 @@ func run() error {
 			Client: &http.Client{}}, libStore, func() library.DTO { return dto }, log),
 		App: appupdate.NewHandler(appupdate.Config{GiteaURL: cfg.GiteaURL, Repo: cfg.GiteaRepo, Token: cfg.GiteaToken,
 			Dir: cfg.UpdatesDir, MinSupported: cfg.MinAndroidVersionCode}, log),
+		Uploads: uploads.NewHandler(upSvc),
+		TUS:     uploads.NewTUS(uploads.NewStore(pool), cfg.UploadsDir, upSvc.Complete, log),
 	}))
 	log.Info("starting", "version", buildinfo.Version)
 	return httpx.Serve(ctx, log, srv, cfg.ShutdownTimeout)