Search and detail lookup, carrying the two fields the policy engine
needs and that are easy to lose at the edge.

`original_language` arrives as bare ISO 639-1, which has one code for
both Portuguese variants, so the dub rule in §5.2 cannot be expressed
against it alone. `Movie` therefore also carries `origin_countries`,
from `origin_country` where TMDB has it and `production_countries`
otherwise, which is what separates a Brazilian film from a Portuguese
one.

Digital release dates come back appended to the detail call rather than
costing a second round trip, reduced to the earliest type-4 entry across
every country: a release existing in one region is a release that exists
on the indexers. `Movie::is_digitally_released` puts the §6.2 gate in
one tested place.

Responses are cached in process for a day, matching the metadata refresh
tick. Failures are never cached, so an outage cannot pin a title into a
bad state until tomorrow.

Tests are wiremock-backed, per §12.

@@ -0,0 +85,4 @@
+            params.push(("year", year.to_string()));
+        }
+
+        let key = match year {

@@ -0,0 +147,4 @@
+
+        if status.is_success() {
+            let body: Arc<str> = Arc::from(response.text().await?);
+            self.cache.insert(cache_key.to_owned(), Arc::clone(&body));

@@ -0,0 +85,4 @@
+            params.push(("year", year.to_string()));
+        }
+
+        let page: RawSearchPage = self.get_json("search/movie", &params).await?;

@@ -0,0 +147,4 @@
+    ///
+    /// The API key is deliberately not in the URL yet: it is appended at send
+    /// time so it can never reach a cache key or a log line.
+    fn request_url(&self, path: &str, params: &[(&str, String)]) -> Result<(Url, String)> {

@@ -0,0 +85,4 @@
+            params.push(("year", year.to_string()));
+        }
+
+        let page: RawSearchPage = self.get_json("search/movie", &params).await?;

@@ -0,0 +147,4 @@
+    ///
+    /// The API key is deliberately not in the URL yet: it is appended at send
+    /// time so it can never reach a cache key or a log line.
+    fn request_url(&self, path: &str, params: &[(&str, String)]) -> Result<(Url, String)> {