fix: migrations, auth, providers health check, E2E tests, remove neko-sama

- Add proper Alembic initial migration (0001_initial_schema.py)
- Migrate refresh tokens from JSON file to SQLite (RefreshTokenTable)
- Remove Neko-Sama provider entirely (redirects to Gupy, not a host)
- Fix provider health check always showing UNKNOWN
  - Run check_all_health() on startup
  - Fix POST /providers/health/check background task bug
  - Add HTMX refresh after manual health check trigger
- Fix anime search relevance scoring with MIN_RELEVANCE_THRESHOLD=0.5
- Replace bare 'except:' with 'except Exception:' across codebase
- Add Playwright E2E test suite (12 tests, auth setup, helpers)
- Fix toast container blocking clicks via pointer-events: none
- Remove obsolete Jest/Vite test files and config
- Clean up obsolete test_watchlist scripts
- Update sonarr model comment for active providers

tests/e2e/user_journey.spec.ts

@@ -1,152 +1,90 @@
 import { test, expect } from '@playwright/test';
+import { switchTab, waitForHtmx, collectJsErrors } from './helpers';
 
 /**
  * User Journey E2E Tests
  *
- * Simulates a complete user flow: register → login → browse → search → settings → logout.
- * All tests are serial because they share browser state (auth token, navigation).
- *
- * FORBIDDEN: Do NOT use page.waitForTimeout() — use waitForResponse() or waitForSelector()
+ * Tests authenticated user flows. Auth is handled by auth.setup.ts + storageState.
  */
-
 test.describe('User Journey E2E', () => {
-  test.describe.configure({ mode: 'serial' });
+  test('should browse homepage without JS errors', async ({ page }) => {
+    const jsErrors = collectJsErrors(page);
+    await page.goto('/web');
 
-  const testData = {
-    username: `e2e_user_${Date.now()}`,
-    password: 'TestPass123!',
-  };
-
-  // Register a new user account via the UI form
-  test('should register a new user', async ({ page }) => {
-    await page.goto('/login');
-
-    // Switch to the register tab
-    await page.click('text=Inscription');
-
-    // Fill out the registration form
-    await page.fill('#registerUsername', testData.username);
-    await page.fill('#registerPassword', testData.password);
-    await page.fill('#registerPasswordConfirm', testData.password);
-
-    // Submit and wait for the API response
-    const [response] = await Promise.all([
-      page.waitForResponse((resp) => resp.url().includes('/api/auth/register')),
-      page.click('#registerSubmit'),
-    ]);
-
-    // Registration should succeed (201 or 200)
-    expect(response.status()).toBeLessThan(400);
-
-    // Verify the success message appears
-    await page.locator('#authSuccess').waitFor({ state: 'visible', timeout: 10000 });
-    const successText = await page.locator('#authSuccess').textContent();
-    expect(successText).toMatch(/réussie|inscription/i);
-  });
-
-  // Login with the credentials registered in the previous test
-  test('should login with registered credentials', async ({ page }) => {
-    await page.goto('/login');
-
-    await page.fill('#loginUsername', testData.username);
-    await page.fill('#loginPassword', testData.password);
-
-    // Submit and wait for the login API response
-    const [response] = await Promise.all([
-      page.waitForResponse((resp) => resp.url().includes('/api/auth/login')),
-      page.click('#loginSubmit'),
-    ]);
-
-    expect(response.status()).toBeLessThan(400);
-
-    // Verify success message
-    await page.locator('#authSuccess').waitFor({ state: 'visible', timeout: 10000 });
-    const successText = await page.locator('#authSuccess').textContent();
-    expect(successText).toMatch(/réussie/i);
-
-    // Wait for redirect to /web
-    await page.waitForURL('**/web**', { timeout: 10000 });
-
-    // Verify the auth token is stored in localStorage
-    const token = await page.evaluate(() => localStorage.getItem('auth_token'));
-    expect(token).toBeTruthy();
-  });
-
-  // Browse the homepage — verify layout loads without JS errors
-  test('should browse homepage without errors', async ({ page }) => {
-    // Collect JS page errors
-    const errors: string[] = [];
-    page.on('pageerror', (err) => errors.push(err.message));
-
-    // Ensure we are on /web (carried over from login)
-    if (!page.url().includes('/web')) {
-      await page.goto('/web');
-    }
-
-    // Wait for main content area to be visible
-    await page.locator('#main-content').waitFor({ state: 'visible', timeout: 10000 });
-
-    // Verify the header heading
+    // Main content should be visible
+    await expect(page.locator('#main-content')).toBeVisible();
     await expect(page.locator('header h1')).toContainText('Ohm Stream');
 
-    // Verify at least one navigation tab is visible
+    // At least one tab visible
     await expect(page.locator('.tab').first()).toBeVisible();
 
-    // Verify the user info panel (logged-in state indicator)
+    // Authenticated user info should be visible
     await expect(page.locator('#userInfo')).toBeVisible();
 
-    // No JavaScript errors should have been thrown
-    expect(errors).toHaveLength(0);
+    expect(jsErrors).toHaveLength(0);
   });
 
-  // Search for an anime via the Anime tab — results may be empty but the UI must respond
   test('should search for anime', async ({ page }) => {
-    // Navigate to the Anime tab
-    await page.click('.tab:has-text("Anime")');
+    // Mock the anime search API to return deterministic HTML
+    await page.route('/api/anime/search?**', async (route) => {
+      await route.fulfill({
+        status: 200,
+        contentType: 'text/html',
+        body: `
+          <div class="sr-card">
+            <h3>Naruto Shippuden</h3>
+            <p>Anime-Sama</p>
+          </div>
+          <div class="sr-card">
+            <h3>Boruto: Naruto Next Generations</h3>
+            <p>Neko-Sama</p>
+          </div>
+        `,
+      });
+    });
+
+    await page.goto('/web');
+    await switchTab(page, 'Anime');
     await page.locator('#tab-anime').waitFor({ state: 'visible', timeout: 5000 });
 
-    // Fill the search input — HTMX debounce triggers the request automatically
     await page.fill('#animeSearchInput', 'Naruto');
 
-    // Wait for either results, an empty-state message, or the loading spinner to disappear
-    await Promise.race([
-      page.locator('#animeSearchResults .sr-card').first().waitFor({ timeout: 15000 }),
-      page.locator('#animeSearchResults .sr-empty').first().waitFor({ timeout: 15000 }),
-      page.locator('#search-loading').waitFor({ state: 'detached', timeout: 15000 }),
-    ]);
+    // Click search button to trigger submit
+    await page.click('#tab-anime button[type="submit"]');
 
-    // The search results container must be present regardless of result count
+    // Wait for results to appear
+    await page.locator('#animeSearchResults .sr-card').first().waitFor({ state: 'visible', timeout: 10000 });
+
+    // Results container should be visible and contain mocked data
     await expect(page.locator('#animeSearchResults')).toBeVisible();
+    await expect(page.locator('#animeSearchResults')).toContainText('Naruto Shippuden');
   });
 
-  // Change a setting (language) and verify the PATCH response and toast notification
   test('should update settings', async ({ page }) => {
-    // Open the settings tab
-    await page.click('.tab:has-text("Paramètres")');
+    await page.goto('/web');
+    await switchTab(page, 'Paramètres');
 
-    // Settings panel is loaded dynamically via HTMX — wait for the form
+    // Wait for settings form loaded via HTMX
     await page.locator('#default_lang').waitFor({ state: 'visible', timeout: 15000 });
 
-    // Change the default language
     await page.selectOption('#default_lang', 'vf');
 
-    // Submit the settings form and capture the PATCH response
     const [response] = await Promise.all([
       page.waitForResponse(
         (resp) => resp.url().includes('/api/settings') && resp.request().method() === 'PATCH'
       ),
-      page.locator('form[hx-patch="/api/settings"] button[type="submit"]').click(),
+      page.locator('button:has-text("Enregistrer les preferences")').click(),
     ]);
 
     expect(response.status()).toBe(200);
 
-    // Verify a toast notification appears confirming the save
-    await page.locator('.toast').first().waitFor({ state: 'visible', timeout: 5000 });
+    // Verify the setting was updated in the UI
+    await expect(page.locator('#default_lang')).toHaveValue('vf');
   });
 
-  // Logout — verify the API call succeeds, redirect happens, and token is cleared
   test('should logout successfully', async ({ page }) => {
-    // Click the logout button and wait for the API response
+    await page.goto('/web');
+
     const [response] = await Promise.all([
       page.waitForResponse((resp) => resp.url().includes('/api/auth/logout')),
       page.locator('#userInfo button:has-text("Déconnexion")').click(),
@@ -154,7 +92,7 @@ test.describe('User Journey E2E', () => {
 
     expect(response.status()).toBeLessThan(400);
 
-    // Should be redirected back to the login page
+    // Should redirect to login
     await page.waitForURL('**/login**', { timeout: 10000 });
 
     // The auth token must be cleared from localStorage