feat(api): /api/quarantine user + admin endpoints + Service wiring

User-facing /api/quarantine handlers (POST flag, DELETE unflag, GET mine)
plus the five /api/admin/quarantine endpoints (queue, resolve, delete-file,
delete-via-lidarr, actions). Mount() and the handlers struct now accept the
lidarrquarantine.Service, constructed in server.go alongside the existing
lidarrrequests wiring.

internal/api/api.go

@@ -14,6 +14,7 @@ import (
 	"git.fabledsword.com/bvandeusen/minstrel/internal/auth"
 	"git.fabledsword.com/bvandeusen/minstrel/internal/config"
 	"git.fabledsword.com/bvandeusen/minstrel/internal/lidarrconfig"
+	"git.fabledsword.com/bvandeusen/minstrel/internal/lidarrquarantine"
 	"git.fabledsword.com/bvandeusen/minstrel/internal/lidarrrequests"
 	"git.fabledsword.com/bvandeusen/minstrel/internal/playevents"
 )
@@ -21,9 +22,15 @@ import (
 // Mount attaches /api/* handlers to r. Public endpoints (login) are outside
 // RequireUser; everything else is gated by the middleware. The events writer
 // is shared with the Subsonic mount so /rest/scrobble feeds the same store.
-func Mount(r chi.Router, pool *pgxpool.Pool, logger *slog.Logger, events *playevents.Writer, recCfg config.RecommendationConfig, lidarrCfg *lidarrconfig.Service, lidarrReqs *lidarrrequests.Service) {
+func Mount(r chi.Router, pool *pgxpool.Pool, logger *slog.Logger, events *playevents.Writer, recCfg config.RecommendationConfig, lidarrCfg *lidarrconfig.Service, lidarrReqs *lidarrrequests.Service, lidarrQuar *lidarrquarantine.Service) {
 	rng := rand.New(rand.NewSource(rand.Int63()))
-	h := &handlers{pool: pool, logger: logger, events: events, recCfg: recCfg, rng: rng.Float64, lidarrCfg: lidarrCfg, lidarrRequests: lidarrReqs}
+	h := &handlers{
+		pool: pool, logger: logger, events: events, recCfg: recCfg,
+		rng:              rng.Float64,
+		lidarrCfg:        lidarrCfg,
+		lidarrRequests:   lidarrReqs,
+		lidarrQuarantine: lidarrQuar,
+	}
 
 	r.Route("/api", func(api chi.Router) {
 		api.Post("/auth/login", h.handleLogin)
@@ -61,6 +68,10 @@ func Mount(r chi.Router, pool *pgxpool.Pool, logger *slog.Logger, events *playev
 			authed.Get("/requests/{id}", h.handleGetRequest)
 			authed.Delete("/requests/{id}", h.handleCancelRequest)
 
+			authed.Post("/quarantine", h.handleFlag)
+			authed.Delete("/quarantine/{track_id}", h.handleUnflag)
+			authed.Get("/quarantine/mine", h.handleListMyQuarantine)
+
 			authed.Route("/admin", func(admin chi.Router) {
 				admin.Use(auth.RequireAdmin())
 				admin.Get("/lidarr/config", h.handleGetLidarrConfig)
@@ -71,17 +82,24 @@ func Mount(r chi.Router, pool *pgxpool.Pool, logger *slog.Logger, events *playev
 				admin.Get("/requests", h.handleListAdminRequests)
 				admin.Post("/requests/{id}/approve", h.handleApproveRequest)
 				admin.Post("/requests/{id}/reject", h.handleRejectRequest)
+
+				admin.Get("/quarantine", h.handleListAdminQuarantine)
+				admin.Post("/quarantine/{track_id}/resolve", h.handleResolveQuarantine)
+				admin.Post("/quarantine/{track_id}/delete-file", h.handleDeleteQuarantineFile)
+				admin.Post("/quarantine/{track_id}/delete-via-lidarr", h.handleDeleteQuarantineViaLidarr)
+				admin.Get("/quarantine/actions", h.handleListQuarantineActions)
 			})
 		})
 	})
 }
 
 type handlers struct {
-	pool           *pgxpool.Pool
-	logger         *slog.Logger
-	events         *playevents.Writer
-	recCfg         config.RecommendationConfig
-	rng            func() float64
-	lidarrCfg      *lidarrconfig.Service
-	lidarrRequests *lidarrrequests.Service
+	pool             *pgxpool.Pool
+	logger           *slog.Logger
+	events           *playevents.Writer
+	recCfg           config.RecommendationConfig
+	rng              func() float64
+	lidarrCfg        *lidarrconfig.Service
+	lidarrRequests   *lidarrrequests.Service
+	lidarrQuarantine *lidarrquarantine.Service
 }