feat(identity): open identity_unresolved decisions for resources with no candidates

no_match resources (and lookup failures after auto-review gives up) now
open a decision in the inbox with options to set a TMDB ID, pick a local
work, or dismiss; ambiguous decisions get the same manual options.
Resolve accepts identity {tmdb | mediaEntityId} and assigns with a manual
lock. The inbox option dialog collects the TMDB type/ID or searches local
works; the identity pool links each pending item to its inbox filter.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/console/confirm-dialog.tsx

@@ -27,6 +27,7 @@ export function ConfirmDialog({
   confirmLabel = "确认",
   cancelLabel = "取消",
   destructive = false,
+  confirmDisabled = false,
   onConfirm,
   children,
 }: {
@@ -38,6 +39,8 @@ export function ConfirmDialog({
   confirmLabel?: string;
   cancelLabel?: string;
   destructive?: boolean;
+  /** 输入未填完整时禁用确认按钮 */
+  confirmDisabled?: boolean;
   onConfirm: () => unknown | Promise<unknown>;
   /** 描述下方的额外内容(输入确认等) */
   children?: ReactNode;
@@ -74,7 +77,7 @@ export function ConfirmDialog({
         {children}
         <AlertDialogFooter>
           <AlertDialogCancel disabled={pending}>{cancelLabel}</AlertDialogCancel>
-          <Button variant={destructive ? "destructive" : "default"} onClick={run} disabled={pending}>
+          <Button variant={destructive ? "destructive" : "default"} onClick={run} disabled={pending || confirmDisabled}>
             {pending ? <LoaderCircle className="animate-spin" /> : null}
             {confirmLabel}
           </Button>