fix(admin): approve flow surfaces real errors; auto-default Lidarr picks

The "I can't approve a request, the toast just says unknown" bug was
four problems compounded:

1. Lidarr config let enabled=true save with default_quality_profile_id=0
   and default_root_folder_path=''. Approve then sent invalid POST bodies
   to Lidarr, which 5xx'd.
2. lidarr.client.post() discarded Lidarr's response body on error, so
   we couldn't tell why Lidarr 5xx'd from server logs.
3. handleApproveRequest's error switch didn't map ErrServerError or
   ErrLookupFailed — both fell through to a generic 500 server_error.
4. apiFetch only parsed {error: {code, message}} envelopes, but admin
   endpoints write {error: 'code_string'}. Every admin error toast
   rendered as 'unknown'.

Fixes:

- internal/lidarr/client.go: capture up to 512 bytes of Lidarr's response
  body when it returns 4xx/5xx; include in the wrapped error so server
  logs show what Lidarr actually said instead of just the status bucket.
- internal/lidarrrequests/service.go: new ErrDefaultsIncomplete fires
  before the Lidarr call when QP=0 or root_folder=''. Stops the bad
  POST entirely.
- internal/api/admin_requests.go: handleApproveRequest now maps
  ErrDefaultsIncomplete -> 'lidarr_defaults_incomplete' (400),
  ErrServerError -> 'lidarr_server_error' (502),
  ErrLookupFailed -> 'lidarr_rejected' (502).
- internal/api/admin_lidarr.go: handlePutLidarrConfig now requires
  QP + root folder to be set whenever enabled=true.
- web/src/lib/api/client.ts: apiFetch handles both error envelope shapes
  so admin error codes propagate to toasts.
- web/src/routes/admin/integrations/+page.svelte: auto-default to the
  first quality profile and first root folder Lidarr returns when the
  operator hasn't picked one yet — saves a click for typical
  one-profile/one-folder home setups.
- web/src/routes/admin/requests/+page.svelte: friendly toast copy for
  the new error codes.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

internal/lidarrrequests/service.go

@@ -24,6 +24,12 @@ var (
 	ErrNotPending        = errors.New("lidarrrequests: request is not pending")
 	ErrNotFound          = errors.New("lidarrrequests: request not found")
 	ErrLidarrDisabled    = errors.New("lidarrrequests: lidarr not configured")
+	// ErrDefaultsIncomplete fires when Lidarr is enabled but the operator
+	// hasn't picked a default quality profile or root folder. Without those,
+	// Lidarr's add-artist/add-album endpoints reject the payload with a
+	// generic 5xx — surfacing a typed error here lets the admin UI tell the
+	// operator exactly what to fix.
+	ErrDefaultsIncomplete = errors.New("lidarrrequests: default quality profile or root folder not configured")
 )
 
 // CreateParams is the input for a new request from a user.
@@ -168,6 +174,9 @@ func (s *Service) Approve(ctx context.Context, requestID pgtype.UUID, adminID pg
 	if ov.RootFolderPath != "" {
 		rf = ov.RootFolderPath
 	}
+	if qp == 0 || rf == "" {
+		return dbq.LidarrRequest{}, ErrDefaultsIncomplete
+	}
 
 	switch row.Kind {
 	case dbq.LidarrRequestKindArtist: