feat: fix auth, provider health checks, search, and redesign UI

- Fix register/login: dict-style access on UserTable ORM objects
- Fix HTMX auth: inject JWT token in all HTMX request headers
- Fix FS7 search: use DLE AJAX endpoint /engine/ajax/search.php
- Fix ZT search: use ?p=series&search=QUERY (not DLE format)
- Fix provider health: load hardcoded providers + domain manager
- Add self.id to all anime/series providers
- Redesign homepage: Netflix-style horizontal scroll cards (.hc)
- Redesign search results: grouped by title, poster + synopsis + 3 buttons
- Add Télécharger dropdown: season download + episode picker
- Fix navbar CSS: restore .tabs flex layout, remove orphan rules
- Fix HTMX spinner: remove inline display:none, use CSS indicator
- Add AGENTS.md files across project for developer documentation

app/downloaders/anime_sites/AGENTS.md

@@ -1,4 +1,4 @@
-# Anime Sites Downloaders
+# Anime Sites (app/downloaders/anime_sites/)
 
 ## OVERVIEW
 Handlers for French anime streaming catalogs that provide metadata and episode listings, delegating actual video extraction to video player handlers.
@@ -7,8 +7,8 @@ Handlers for French anime streaming catalogs that provide metadata and episode l
 
 | File | Purpose |
 |------|---------|
-| `base.py` | Abstract `BaseAnimeSite` class defining the interface all anime sites implement |
-| `animesama.py` | Primary provider with dynamic domain switching, multiple video player extraction |
+| `base.py` | Abstract `BaseAnimeSite` class defining the interface |
+| `animesama.py` | Primary provider — dynamic domain switching, multiple video player extraction |
 | `nekosama.py` | Neko-Sama / Gupy integration (metadata-only, no direct downloads) |
 | `animeultime.py` | Anime-Ultime catalog handler |
 | `vostfree.py` | Vostfree catalog handler |
@@ -16,26 +16,26 @@ Handlers for French anime streaming catalogs that provide metadata and episode l
 
 ## CONVENTIONS
 
-### Interface Contract
-Each site must implement four async methods from `BaseAnimeSite`:
-- `can_handle(url: str) -> bool` — URL pattern matching
-- `search_anime(query, lang) -> list[dict]` — Returns `{title, url, cover_image}`
-- `get_episodes(anime_url, lang) -> list[dict]` — Returns `{episode_number, url, title, host}`
-- `get_anime_metadata(anime_url) -> dict` — Returns `{synopsis, genres, rating, release_year, studio, poster_image, total_episodes, status}`
-- `get_download_link(url) -> tuple[str, str]` — Returns `(video_player_url, filename)`
+**Interface contract** — each site implements from `BaseAnimeSite`:
+- `can_handle(url)` — URL pattern matching
+- `search_anime(query, lang)` → `[{title, url, cover_image}]`
+- `get_episodes(anime_url, lang)` → `[{episode_number, url, title, host}]`
+- `get_anime_metadata(anime_url)` → `{synopsis, genres, rating, release_year, studio, poster_image, total_episodes, status}`
+- `get_download_link(url)` → `(video_player_url, filename)`
 
-### Key Patterns
-- **Pipe-separated URLs**: `video_url|anime_page_url|episode_title` — preserves context across extraction
-- **Language parameter**: `lang="vostfr"` or `"vf"` — controls which episodes to return
-- **Video player delegation**: Anime sites return player URLs (vidmoly, sendvid, sibnet, lpayer), not direct downloads
-- **Filename generation**: `{anime_name} - S{season} - {episode}.mp4` format
-- **HTTP headers**: Browser UA and referer required to avoid blocking
+**Key patterns**:
+- Pipe-separated URLs: `video_url|anime_page_url|episode_title`
+- Language param: `lang="vostfr"` or `"vf"`
+- Video player delegation: returns player URLs (vidmoly, sendvid, etc.), NOT direct downloads
+- Filename format: `{anime_name} - S{season} - {episode}.mp4`
+- Browser UA + referer headers required
 
-### Domain Detection
-- `AnimeSamaDownloader` fetches current domain from `anime-sama.pw` dynamically
-- Uses fallback chain for video extraction: detected player → cached player → priority list
+**Domain detection**: `AnimeSamaDownloader` fetches current domain from `anime-sama.pw` dynamically. Uses fallback chain for video extraction.
 
-### Error Handling
-- Raise `Exception` with descriptive message on failure
-- Log at appropriate level (`debug` for expected failures, `error` for unexpected)
-- Validate extracted URLs with `_test_video_url()` before returning
+**Error handling**: Raise `Exception` with descriptive message. Log at `debug` for expected failures, `error` for unexpected. Validate URLs with `_test_video_url()` before returning.
+
+## ANTI-PATTERNS
+
+- Do NOT return direct download URLs from anime sites — return player URLs
+- Do NOT skip URL validation — use `_test_video_url()`
+- 5 empty `except:` blocks in `animesama.py` — known tech debt, silently swallow failures