refactor(arr): give arr-api its own jellyfin client

arr-daemon depends on arr-api, so a handler in arr-api can never
reach the daemon's private JellyfinClient. Move it into arr-api and
attach an instance to AppState, so a manual subtitle write can ask
for the same refresh import already does (#195).

crates/arr-daemon/src/main.rs

@@ -6,7 +6,6 @@ mod config;
 mod grab;
 mod import;
 mod indexers;
-mod jellyfin;
 mod manual;
 mod metadata;
 mod notify;
@@ -94,7 +93,7 @@ enum Error {
     #[error("transmission client: {0}")]
     Transmission(#[from] arr_dl::Error),
     #[error("jellyfin client: {0}")]
-    Jellyfin(#[from] jellyfin::Error),
+    Jellyfin(#[from] arr_api::jellyfin::Error),
     #[error("ntfy client: {0}")]
     Notify(#[from] notify::NotifyError),
     #[error("bind {addr}: {source}")]
@@ -124,6 +123,7 @@ async fn run() -> Result<(), Error> {
         None
     };
     let notifier = Notifier::new(config.ntfy_url.clone())?;
+    let api_jellyfin = jellyfin_client(&config)?;
     let (reconcile, manual_grab, manual_tv) =
         reconcile_loop(&database, &config, &transmission, tmdb.as_ref(), &notifier)?;
     // Issue #176: the on-demand half of the metadata lane needs its own
@@ -150,7 +150,8 @@ async fn run() -> Result<(), Error> {
             config.opensubtitles_api_key,
             config.opensubtitles_username,
             config.opensubtitles_password,
-        ));
+        ))
+        .with_jellyfin(api_jellyfin);
 
     let app = arr_api::router(state.clone())
         .merge(arr_compat::router(compat))
@@ -300,10 +301,7 @@ fn reconcile_loop(
     } else {
         tracing::warn!("TMDB is not configured: series metadata refresh is disabled");
     }
-    let jellyfin = jellyfin::JellyfinClient::new(
-        config.jellyfin_url.clone(),
-        config.jellyfin_api_key.clone(),
-    )?;
+    let jellyfin = jellyfin_client(config)?;
     // Grab before import, so a download that completes on this tick is
     // imported on this tick.
     reconcile = reconcile.register(
@@ -450,6 +448,16 @@ async fn shutdown() {
     tracing::info!("shutting down");
 }
 
+/// The Jellyfin client, built fresh for each of its two independent callers:
+/// import's own reconcile action, and the subtitle API's manual grab and
+/// translate handlers (§7.5, §15).
+fn jellyfin_client(config: &Config) -> Result<arr_api::jellyfin::JellyfinClient, Error> {
+    Ok(arr_api::jellyfin::JellyfinClient::new(
+        config.jellyfin_url.clone(),
+        config.jellyfin_api_key.clone(),
+    )?)
+}
+
 /// The subtitle providers this deployment can reach (DESIGN.md §15).
 ///
 /// Credentials are bootstrap config and never reach the database (§10), so