Implement file hash-based library matching and remove fuzzy ASIN matching

Adds file hash-based matching for Audiobookshelf library items to ensure 100% accurate ASIN assignment for RMAB-organized content. Removes fuzzy matching from library availability checks, making all matching ASIN-only to eliminate false positives and race conditions. Updates database schema, processors, and matcher utilities; adds new tests and documentation for the new matching strategy. Removes obsolete scripts, Dockerfile, and related tests; updates docker-compose for test environments.

src/lib/services/auth/IAuthProvider.ts

@@ -10,7 +10,6 @@ export interface UserInfo {
   email?: string;
   avatarUrl?: string;
   role?: string;           // 'admin' | 'user'
-  isAdmin?: boolean;       // Deprecated: use role instead
   authProvider?: string;   // 'plex' | 'oidc' | 'local'
 }
 

src/lib/services/auth/LocalAuthProvider.ts

@@ -113,7 +113,7 @@ export class LocalAuthProvider implements IAuthProvider {
         id: user.id,
         plexId: user.plexId,
         username: user.plexUsername,
-        isAdmin: user.role === 'admin',
+        role: user.role,
       });
 
       logger.info('Tokens generated, returning user data');
@@ -214,7 +214,7 @@ export class LocalAuthProvider implements IAuthProvider {
         id: user.id,
         plexId: user.plexId,
         username: user.plexUsername,
-        isAdmin: user.role === 'admin',
+        role: user.role,
       });
 
       return {
@@ -245,7 +245,7 @@ export class LocalAuthProvider implements IAuthProvider {
       sub: userInfo.id,
       plexId: userInfo.plexId,
       username: userInfo.username,
-      role: userInfo.isAdmin ? 'admin' : 'user',
+      role: userInfo.role || 'user',
     };
 
     logger.debug('JWT token payload', { tokenPayload });

src/lib/services/auth/OIDCAuthProvider.ts

@@ -454,7 +454,7 @@ export class OIDCAuthProvider implements IAuthProvider {
         username: user.plexUsername,
         email: user.plexEmail || undefined,
         avatarUrl: user.avatarUrl || undefined,
-        isAdmin: user.role === 'admin',
+        role: user.role,
         authProvider: 'oidc',
       },
       isFirstLogin: isFirstUser && shouldTriggerJobs,
@@ -518,7 +518,7 @@ export class OIDCAuthProvider implements IAuthProvider {
       sub: userInfo.id,
       plexId: userInfo.id, // For backwards compatibility
       username: userInfo.username,
-      role: userInfo.isAdmin ? 'admin' : 'user',
+      role: userInfo.role || 'user',
     });
 
     const refreshToken = generateRefreshToken(userInfo.id);

src/lib/services/auth/PlexAuthProvider.ts

@@ -239,7 +239,7 @@ export class PlexAuthProvider implements IAuthProvider {
       username: user.plexUsername,
       email: user.plexEmail || undefined,
       avatarUrl: user.avatarUrl || undefined,
-      isAdmin: user.role === 'admin',
+      role: user.role,
       authProvider: 'plex',
     };
   }
@@ -252,7 +252,7 @@ export class PlexAuthProvider implements IAuthProvider {
       sub: userInfo.id,
       plexId: userInfo.id, // For backwards compatibility
       username: userInfo.username,
-      role: userInfo.isAdmin ? 'admin' : 'user',
+      role: userInfo.role || 'user',
     });
 
     const refreshToken = generateRefreshToken(userInfo.id);