feat(files): W5-A2 move/copy via planImport, organize overrides, delete records, download

- /files/move|copy go through planImport's new `transfer` variant (keep names, directory
  expanded to per-file plan) → organization_record + verifyAndImport/executeRecord: per-file
  ledger resumable, fsproxy, cross-volume directory move = per-file copy→verify→delete then
  remove empty source dirs; shared plan store + plan_stale; asset_location follows per file,
  path_binding revised when a whole directory moved (finalizeTransfer); request waits up to
  FILES_TRANSFER_WAIT_SEC, else executed.pending
- /files/organize per-item overrides take effect: season/episodes (domain planOrganize
  overrides), contentUnitId coverage, targetDir (no binding), operation, slotId (satisfied
  after verify); warnings only for inapplicable overrides
- delete/trash/restore write organization_record (action trash|delete|restore, file-level
  results; migration 0026)
- GET /files/download (admin session, nfo/subtitle/image, size cap, streamed, audited)
- GET /files/records?ids|planIds for the organize page
- fs race errors map to 503/404/403/400 instead of 500
- runbook updated

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/db/src/types.ts

@@ -154,12 +154,28 @@ export type MediaServerInstanceHealthStatus = "unknown" | "healthy" | "degraded"
 export type MetadataFieldSource = "tmdb" | "user" | "agent" | "nfo" | "site" | "import";
 export type ObservationStatus = "new" | "linked" | "ignored" | "error";
 export type OrganizationFileResultRole = "main" | "subtitle" | "audio" | "bluray_dir" | "nfo" | "image" | "other";
-export type OrganizationFileResultMode = "copy" | "move" | "rename" | "relocate" | "hardlink";
+export type OrganizationFileResultMode =
+  | "copy"
+  | "move"
+  | "rename"
+  | "relocate"
+  | "hardlink"
+  | "trash"
+  | "delete"
+  | "restore";
 export type OrganizationFileResultStatus = "queued" | "running" | "succeeded" | "failed" | "skipped" | "cancelled";
 export type OrganizationRecordTrigger = "auto" | "manual" | "agent";
 export type OrganizationRecordActorType = "user" | "agent" | "system" | "api_key";
 export type OrganizationRecordSourcePathView = "downloader" | "local" | "library";
-export type OrganizationRecordAction = "copy" | "move" | "rename" | "relocate" | "hardlink";
+export type OrganizationRecordAction =
+  | "copy"
+  | "move"
+  | "rename"
+  | "relocate"
+  | "hardlink"
+  | "trash"
+  | "delete"
+  | "restore";
 export type OrganizationRecordStatus = "queued" | "running" | "succeeded" | "partial" | "failed" | "cancelled";
 export type OutboxEventStatus = "pending" | "dispatched" | "failed" | "dead";
 export type PathBindingBindingKind = "entity" | "season";