fix(web): drift audit batch 5 — SSR redirect + radio exclude cap

Two web-side findings from the 2026-06-02 drift audit (#552):

- **#559** /library and /playlists each had a +page.server.ts
  file calling redirect(308, ...). The app is configured as
  adapter-static + ssr=false (+layout.ts:5), so +page.server.ts
  files only run at build time / dev server — NEVER at runtime in
  the deployed build. Direct navigation to /library or /playlists
  (mobile bookmarks, hand-typed URLs) hit a blank page or 404. We
  worked around this earlier today by linking the nav directly to
  /library/artists, but bookmarks stayed broken. Converted both
  files to +page.ts (universal load) — same redirect logic, runs
  client-side in the SPA, which is what actually executes.

- **#554** Radio auto-refresh built its exclude= query parameter
  from the ENTIRE queue, growing unbounded each refresh as new
  tracks were appended. UUIDs are ~36 chars + comma; with the
  common 8KB query-string limit, ~220 tracks is the ceiling. A
  multi-hour radio session eventually 414'd; the .catch() ate the
  error and the player silently stopped topping up — dead radio
  with no user-visible signal. Cap exclude to the most recent 100
  ids; the server's RecentlyPlayedHours filter already handles
  broader history dedup so the request-side cap only needs to
  cover the visible queue's recent tail.

web/src/lib/player/store.svelte.ts

@@ -462,7 +462,18 @@ $effect.root(() => {
 
     _radioRefreshInFlight = true;
     const seed = _radioSeedId;
-    const exclude = _queue.map((t) => t.id).join(',');
+    // Drift #554: cap the exclude list so a multi-hour radio session
+    // doesn't grow the query string past common 8KB limits and start
+    // 414-ing /api/radio. The .catch() below would silently swallow
+    // that failure and the player would stop topping up — a dead
+    // radio. The server's RecentlyPlayedHours filter already handles
+    // broader history dedup, so the request-side exclude only needs
+    // to cover the visible queue's recent tail.
+    const RADIO_EXCLUDE_CAP = 100;
+    const exclude = _queue
+      .slice(-RADIO_EXCLUDE_CAP)
+      .map((t) => t.id)
+      .join(',');
     api
       .get<RadioResponse>(
         `/api/radio?seed_track=${encodeURIComponent(seed)}&exclude=${exclude}`