fix(sites): HHClub parsing, resource list layout and request restraint (re-landed)

Re-lands 901b01d, which was reverted wholesale by 28974d1 (BR-2 committed
from the shared index). The agent UI files 901b01d had rolled back are
left at their AGUI-2 versions; contracts, routes, db types and the runbook
part already reached main through later commits, so this carries the rest.

HHClub (憨憨) was checked read-only against a real account (one detail
request; list, user data and health came from the product's own fetch).

Parsing fixes:
- list titles carried the site's new-torrent marker "[新]" (58 of 100
  rows; the detail page title has none); stripped with a replace filter
- refreshing a detail overwrote seeders / leechers / snatched / category
  name / H&R with null because the HHClub div detail page lacks them;
  detail values now fall back to the list snapshot (mergeDetailOverList),
  and an unknown detail promotion keeps the list promotion
- level "贵宾" is VIP (umt.vipLevels)
- sanitized minimal fixture HHANCLUB_LIST_PAGE_2026 + tests; README marks
  HHClub as verified 2026-09-29
Size, counts, category ids/names, +08:00 time and subtitle were correct.

Request restraint:
- site definitions may carry umt.defaults; merged with settings.sites
  (longer intervals, fewer pages): new settings defaultSnapshotMaxPages 1,
  defaultHealthCheckIntervalSec 6 h, defaultDetailCacheSec 24 h; default
  burst 2. HHClub: snapshot 60 min page 1 only, health 6 h, search
  concurrency 1, detail cache 24 h, 1 token / 3 s burst 2
- periodic / manual snapshots are capped to that page count; scheduled
  health checks skip sites checked within the interval; detail refresh is
  served from cache inside the window; live searches on one site queue
- every rate-limiter token is counted per site per hour
  (site_request_count, migration 0046); GET /sites/{id}/request-stats;
  site overview and resource list show requests in the last 24 hours

Resource list: two-layer rows. Main line: title + spec tags (episodes,
resolution, source, codec, HDR, group, 国语/中字, site tags) + promotion
with time left + H&R. Second line: subtitle (one line, ellipsis) and
fixed-width category / size / seed-leech-snatched / upload time
(relative, absolute on hover) columns, stale badge, inventory overlay;
folds into a card on phones.

Also aligns identity_candidate.normalized_title order in db types with
the migrations (schema drift test).

Takes effect after the stack is rebuilt (migration 0046).

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/test/sources-identity/api.test.ts

@@ -175,6 +175,15 @@ describe.skipIf(!up)("来源管理与站点工作台 API", () => {
       .where("key", "=", `site:${siteId}`)
       .executeTakeFirst();
     expect(bucket).toMatchObject({ capacity: 5, refill_per_sec: 200 });
+    // 手动快照要 5 页也只抓访问默认的页数上限(settings.sites.defaultSnapshotMaxPages 缺省 1)
+    expect((await snapshotSite(h.rt, { siteId, kind: "manual", maxPages: 5 })).pages).toEqual([1]);
+    // 每拿到一个令牌计一次请求,按小时聚合;站点页读最近 24 小时
+    await new Promise((r) => setTimeout(r, 50));
+    const stats = await json(await h.req(`/sites/${siteId}/request-stats`));
+    expect(stats.status).toBe(200);
+    expect(stats.body.data.last24h).toBeGreaterThanOrEqual(4);
+    expect(stats.body.data.hourly).toHaveLength(24);
+    expect(stats.body.data.access).toMatchObject({ snapshotMaxPages: 1, healthCheckIntervalSec: 21600 });
   });
 
   it("工作台列表:快照优先,标注来源与更新时间;筛选与分页", async () => {
@@ -219,6 +228,13 @@ describe.skipIf(!up)("来源管理与站点工作台 API", () => {
     expect(d.body.data.refreshError).toBeNull();
     expect(d.body.data.volatile.recheckBeforeDownload).toBe(true);
     expect(d.body.data.volatile.detailFetchedAt).not.toBeNull();
+    // 详情缓存期内(settings.sites.defaultDetailCacheSec 缺省 24 小时)再次刷新不请求站点
+    const before = mock.requests.length;
+    const cached = await json(await h.req(`/sites/${siteId}/releases/${rel.id}?refresh=true`));
+    expect(cached.body.data.refreshError).toBeNull();
+    expect(mock.requests.length).toBe(before);
+    // 缓存过期后才重新抓
+    await h.db.updateTable("source_release").set({ detail_fetched_at: null }).where("id", "=", rel.id).execute();
     mock.setLoggedIn(false);
     const d2 = await json(await h.req(`/sites/${siteId}/releases/${rel.id}?refresh=true`));
     expect(d2.status).toBe(200);