feat(identity): lazy TMDB lookup and bounded identity pool (DEC-1)

RSS/list releases that match no subscription or local work no longer hit
TMDB or open a pending item; they go to the identity pool as `unmatched`.
TMDB is queried only on a local alias hit, a published new-title rule whose
prefilter passes, manual/Agent retry, search results, or when the new
setting identity.eagerTmdbLookup (default off) is on. Mirrors MoviePilot:
torrents are recognised only when matched to a subscription or searched,
and recognition failures are logged, not alerted.

- Pending items only for related releases (ambiguous after lookup, or
  related to a local work but unresolved); same source + normalized title
  merge into one decision ("来源「X」的 N 条资源待识别"), resolve/dismiss
  applies to the whole group, members detach as they get resolved.
- Pool governance: unmatched reviews capped (daily, 3x), title_alias
  insert trigger wakes similar entries, stale unmatched entries archived
  after identity.poolArchiveDays (30); review idempotency keys include the
  due time.
- Migration 0047_identity_pool: reason/outcome `unmatched`,
  identity_candidate.normalized_title (+trgm index), wake trigger, and
  cleanup of open identity_unresolved items with no related work
  (dismissed, resolution=moved_to_pool).
- Inbox: group by type + work/source with collapse, hide info-only items
  by default (minSeverity=warning), badge counts warning+ only; pool sheet
  gets manual TMDB/local-work assign and dismiss; settings card for the
  new identity settings.
- Runbook docs/runbook/identity.md.

Requires rebuild/restart (migration runs on start).

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/contracts/src/identity.ts

@@ -126,8 +126,11 @@ export type IdentityRevisionCreate = z.infer<typeof IdentityRevisionCreate>;
 
 export const IdentityCandidateStatus = z.enum(["pending", "resolved", "dismissed", "archived"]);
 export type IdentityCandidateStatus = z.infer<typeof IdentityCandidateStatus>;
-/** proposed = 证据足够但自动化关闭/只读,待确认 */
-export const IdentityCandidateReason = z.enum(["ambiguous", "no_match", "proposed", "lookup_failed"]);
+/**
+ * proposed = 证据足够但自动化关闭/只读,待确认;
+ * unmatched = 惰性识别:本地召回无结果且没有触发 TMDB 查询(不相关的 RSS / 列表资源),只进池、不开待处理
+ */
+export const IdentityCandidateReason = z.enum(["ambiguous", "no_match", "proposed", "lookup_failed", "unmatched"]);
 export type IdentityCandidateReason = z.infer<typeof IdentityCandidateReason>;
 
 /** 待识别池里的一个候选(只存 JSON,不建正式作品) */
@@ -151,6 +154,8 @@ export const IdentityCandidate = EntityBase.extend({
   reason: IdentityCandidateReason,
   /** 解析出的检索条件(标题/年份/季集) */
   query: JsonObject,
+  /** 归一化标题(与 title_alias.normalized 同口径):新增别名时按它唤醒复查,待处理按"来源 + 它"合并 */
+  normalizedTitle: z.string().nullable(),
   candidates: z.array(PoolCandidate),
   evidenceVersion: z.string(),
   attempts: z.number().int().nonnegative(),
@@ -171,6 +176,7 @@ export const ResolutionOutcome = z.enum([
   "lookup_failed",
   "manual",
   "skipped_locked",
+  "unmatched",
 ]);
 export type ResolutionOutcome = z.infer<typeof ResolutionOutcome>;