feat: fix auth, provider health checks, search, and redesign UI

- Fix register/login: dict-style access on UserTable ORM objects
- Fix HTMX auth: inject JWT token in all HTMX request headers
- Fix FS7 search: use DLE AJAX endpoint /engine/ajax/search.php
- Fix ZT search: use ?p=series&search=QUERY (not DLE format)
- Fix provider health: load hardcoded providers + domain manager
- Add self.id to all anime/series providers
- Redesign homepage: Netflix-style horizontal scroll cards (.hc)
- Redesign search results: grouped by title, poster + synopsis + 3 buttons
- Add Télécharger dropdown: season download + episode picker
- Fix navbar CSS: restore .tabs flex layout, remove orphan rules
- Fix HTMX spinner: remove inline display:none, use CSS indicator
- Add AGENTS.md files across project for developer documentation

app/routers/router_auth.py

@@ -10,6 +10,7 @@ Endpoints:
 """
 
 from datetime import datetime, timedelta
+from typing import Optional
 
 from fastapi import APIRouter, Depends, HTTPException, status
 from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
@@ -39,15 +40,48 @@ async def get_current_user_from_token(
             headers={"WWW-Authenticate": "Bearer"},
         )
 
-    user_dict = user_manager.get_user(username)
-    if user_dict is None:
+    user = user_manager.get_user(username)
+    if user is None:
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
             detail="User not found",
             headers={"WWW-Authenticate": "Bearer"},
         )
 
-    return User(**user_dict)
+    return User(
+        id=user.id,
+        username=user.username,
+        email=user.email,
+        full_name=user.full_name,
+        is_active=user.is_active,
+        created_at=user.created_at,
+        last_login=user.last_login,
+    )
+
+
+async def get_optional_user(
+    credentials: Optional[HTTPAuthorizationCredentials] = Depends(
+        HTTPBearer(auto_error=False)
+    ),
+) -> Optional[User]:
+    if credentials is None:
+        return None
+    token = credentials.credentials
+    username = verify_token(token)
+    if username is None:
+        return None
+    user = user_manager.get_user(username)
+    if user is None:
+        return None
+    return User(
+        id=user.id,
+        username=user.username,
+        email=user.email,
+        full_name=user.full_name,
+        is_active=user.is_active,
+        created_at=user.created_at,
+        last_login=user.last_login,
+    )
 
 
 @router.post("/register")
@@ -69,15 +103,13 @@ async def register(user_data: UserCreate):
         )
 
         user_response = User(
-            id=user["id"],
-            username=user["username"],
-            email=user.get("email"),
-            full_name=user.get("full_name"),
-            is_active=user["is_active"],
-            created_at=datetime.fromisoformat(user["created_at"]),
-            last_login=datetime.fromisoformat(user["last_login"])
-            if user.get("last_login")
-            else None,
+            id=user.id,
+            username=user.username,
+            email=user.email,
+            full_name=user.full_name,
+            is_active=user.is_active,
+            created_at=user.created_at,
+            last_login=user.last_login,
         )
 
         return {
@@ -111,23 +143,23 @@ async def login(form_data: UserLogin):
             headers={"WWW-Authenticate": "Bearer"},
         )
 
-    if not user.get("is_active", True):
+    if not user.is_active:
         raise HTTPException(
             status_code=status.HTTP_403_FORBIDDEN, detail="User account is disabled"
         )
 
     access_token = create_access_token(
-        data={"sub": user["username"]}, expires_delta=timedelta(days=7)
+        data={"sub": user.username}, expires_delta=timedelta(days=7)
     )
 
     return {
         "access_token": access_token,
         "token_type": "bearer",
         "user": {
-            "id": user["id"],
-            "username": user["username"],
-            "email": user.get("email"),
-            "full_name": user.get("full_name"),
+            "id": user.id,
+            "username": user.username,
+            "email": user.email,
+            "full_name": user.full_name,
         },
     }
 
@@ -185,7 +217,7 @@ async def refresh_token(refresh_request: dict):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED, detail="User not found"
         )
-    if not user.get("is_active", True):
+    if not user.is_active:
         raise HTTPException(
             status_code=status.HTTP_403_FORBIDDEN, detail="User account is disabled"
         )