feat: 新增视频床与文件床，视频支持 HLS 转码

文件床
- 新增 files/ 存储前缀与 media_type 索引列，图片、视频、文件三类资源独立
- 新增文件上传、列表、删除、批量删除接口，禁止 html/htm/svg
- 支持公开直链与 Token 访问两种模式，后台可切换，直链强制附件下载

视频床
- 新增 videos/ 存储前缀与视频上传接口，单文件上限 500MB
- 接入 ffmpeg 转码队列，并发数与单任务核心数可配，默认串行
- 五档转码质量：直接封装 / 速度 / 平衡 / 质量 / 压缩（压缩档可调码率比例）
- 码率控制避免转码后体积反超源文件，音频跟随源音轨不放大不压缩
- 转码进度实时上报，成功后删除源文件，失败时保留源文件与可用链接
- 上传时自动抽帧生成封面，视频与封面各有独立链接
- 删除视频时中断转码并清理切片、封面与源文件

媒体库
- 图库、视频库、文件库三套独立统计，含趋势、占用与来源分布
- 统一筛选、多选、批量删除、批量标签、网格/列表切换，显示方式按类型分别记忆
- 视频详情对齐图片详情，视频库支持在线播放（hls.js，兼容回退原文件）

修复
- 清理无主的切片、封面与开发期遗留的 ffmpeg 进程
- 源文件按设计删除后，索引不再被启动孤儿清理误删
- 视频统计口径与列表一致，转码中的视频不计入统计
- 转码失败时回收已写入的部分切片，避免残留
- 设置页停用检查更新（与上游版本号已不对应）

其他
- Docker 镜像安装 ffmpeg
- git remote 指向内网仓库

server/api/files/batch-delete.post.ts

@@ -0,0 +1,81 @@
+import type { BatchDeleteResponse } from '~/types/image'
+import { assertImageOwnership, requireApiOrAdminAuth } from '../../utils/access'
+import { createApiError } from '../../utils/api-error'
+import { logActivity } from '../../utils/activity-log'
+import { deleteImageIndex, getImageIndexRow } from '../../utils/image-index'
+import { validateFileKey, validateVideoKey } from '../../utils/image-key'
+import { deleteImage, headImage } from '../../utils/storage'
+import { cancelTranscode, removeHlsArtifacts } from '../../utils/transcode'
+import { MAX_DELETE_BATCH } from '../../utils/constants'
+
+interface BatchDeleteBody {
+  keys?: unknown
+}
+
+export default defineEventHandler(async (event) => {
+  await requireApiOrAdminAuth(event)
+
+  const body = await readBody<BatchDeleteBody>(event).catch((): BatchDeleteBody => ({}))
+  const keys = Array.isArray(body.keys)
+    ? body.keys.map(key => String(key)).filter(Boolean)
+    : []
+
+  if (!keys.length) {
+    createApiError(event, 'INVALID_REQUEST', '未提供要删除的文件', 400)
+  }
+  if (keys.length > MAX_DELETE_BATCH) {
+    createApiError(event, 'INVALID_REQUEST', `每次最多删除 ${MAX_DELETE_BATCH} 个文件`, 400)
+  }
+
+  const deleted: string[] = []
+  const failed: BatchDeleteResponse['failed'] = []
+
+  for (const key of keys) {
+    if (!validateFileKey(key) && !validateVideoKey(key)) {
+      failed.push({ key, error: { code: 'INVALID_IMAGE_KEY', message: '无效的文件路径' } })
+      continue
+    }
+
+    try {
+      const existing = await headImage(key)
+      const indexed = getImageIndexRow(key)
+
+      if (!existing && !indexed) {
+        failed.push({ key, error: { code: 'IMAGE_NOT_FOUND', message: '文件不存在' } })
+        continue
+      }
+
+      const ownerId = existing?.userId ?? indexed?.user_id ?? null
+      await assertImageOwnership(event, ownerId)
+
+      if (validateVideoKey(key)) {
+        cancelTranscode(key)
+        await removeHlsArtifacts(key).catch(() => {})
+      }
+
+      if (existing) {
+        await deleteImage(key, key)
+      } else {
+        deleteImageIndex(key)
+      }
+
+      logActivity(event, {
+        action: 'delete',
+        key,
+        originalName: existing?.originalName ?? indexed?.original_name ?? key,
+        size: existing?.size ?? indexed?.size ?? 0,
+        contentType: existing?.contentType ?? indexed?.content_type ?? 'application/octet-stream',
+        userId: ownerId,
+        backendId: existing?.backendId ?? indexed?.backend_id ?? null
+      })
+
+      deleted.push(key)
+    } catch (error: unknown) {
+      const message = error instanceof Error ? error.message : '删除失败'
+      failed.push({ key, error: { code: 'DELETE_FAILED', message } })
+    }
+  }
+
+  const response: BatchDeleteResponse = { success: failed.length === 0, deleted, failed }
+  return response
+})