Fix review-queue dead ends and harden grab/import/API paths

Stop upgrade-search from queuing mid-confidence matches that approve
cannot honor (owned movies/episodes 409'd on the TUI). De-dupe pending
review rows, scope 1080p gates to the target episode, refuse unsafe
pack cleanup, and require a token for non-loopback binds.

.gitignore

@@ -1,11 +1,13 @@
 /target
 /.ci-old-glibc
 config.toml
+breadarrd.toml
 *.db
 *.db-wal
 *.db-shm
 
 # Local hygiene notes (not for commit)
+CLAUDE.md
 
 # Leftover source tarballs (never commit these)
 **/src.tar.xz