feat: implement 1B domain entities/repos + 1H library API routes

1B — domain layer:
- New entities: Album, Playlist, Like, PlayHistoryEntry
- Track entity extended with album_id, genre, year fields
- New protocols: AlbumRepository, PlaylistRepository, LikeRepository, HistoryRepository
- ArtistRepository / TrackRepository protocols extended (list, count, update, get_many, etc.)
- New repos: SqlAlchemyAlbum/Playlist/Like/HistoryRepository
- Artist and track repos updated to match extended protocols

1H — library API:
- Pagination: PagedResponse[T] generic, offset-based, limit default 50 max 200
- Schemas: TrackOut, AlbumOut, ArtistOut, PlaylistOut/Create/Update,
  LikeEvent/State, HistoryIn/Out, LibrarySearchResponse
- GET/PATCH/DELETE /tracks with filters, sort, pagination
- GET /albums, /albums/{id}, /albums/{id}/tracks
- GET /artists, /artists/{id}, /artists/{id}/albums, /artists/{id}/tracks
- GET /search/library (ILIKE across tracks/albums/artists)
- Full /playlists CRUD + track add/remove (append-only version bump)
- POST /likes (append-only event log), GET /likes, GET /likes/state
- POST /history (scrobble), GET /history
- deps.py: TrackRepoDep, ArtistRepoDep, AlbumRepoDep, PlaylistRepoDep,
  LikeRepoDep, HistoryRepoDep

ruff ✅  mypy ✅  pytest 45/45 ✅

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/api/deps.py

@@ -25,7 +25,11 @@ from app.domain.errors import AuthenticationError, PermissionDeniedError
 from app.domain.ports import FileStorage, PasswordHasher, TokenService
 from app.infrastructure.db import get_sessionmaker
 from app.infrastructure.db.repositories import (
+    SqlAlchemyAlbumRepository,
     SqlAlchemyArtistRepository,
+    SqlAlchemyHistoryRepository,
+    SqlAlchemyLikeRepository,
+    SqlAlchemyPlaylistRepository,
     SqlAlchemyRefreshTokenRepository,
     SqlAlchemyTrackRepository,
     SqlAlchemyUserRepository,
@@ -107,6 +111,39 @@ UploadServiceDep = Annotated[UploadService, Depends(get_upload_service)]
 StreamingServiceDep = Annotated[StreamingService, Depends(get_streaming_service)]
 
 
+# -- library repository deps ---------------------------------------------------
+def get_track_repository(session: SessionDep) -> SqlAlchemyTrackRepository:
+    return SqlAlchemyTrackRepository(session)
+
+
+def get_artist_repository(session: SessionDep) -> SqlAlchemyArtistRepository:
+    return SqlAlchemyArtistRepository(session)
+
+
+def get_album_repository(session: SessionDep) -> SqlAlchemyAlbumRepository:
+    return SqlAlchemyAlbumRepository(session)
+
+
+def get_playlist_repository(session: SessionDep) -> SqlAlchemyPlaylistRepository:
+    return SqlAlchemyPlaylistRepository(session)
+
+
+def get_like_repository(session: SessionDep) -> SqlAlchemyLikeRepository:
+    return SqlAlchemyLikeRepository(session)
+
+
+def get_history_repository(session: SessionDep) -> SqlAlchemyHistoryRepository:
+    return SqlAlchemyHistoryRepository(session)
+
+
+TrackRepoDep = Annotated[SqlAlchemyTrackRepository, Depends(get_track_repository)]
+ArtistRepoDep = Annotated[SqlAlchemyArtistRepository, Depends(get_artist_repository)]
+AlbumRepoDep = Annotated[SqlAlchemyAlbumRepository, Depends(get_album_repository)]
+PlaylistRepoDep = Annotated[SqlAlchemyPlaylistRepository, Depends(get_playlist_repository)]
+LikeRepoDep = Annotated[SqlAlchemyLikeRepository, Depends(get_like_repository)]
+HistoryRepoDep = Annotated[SqlAlchemyHistoryRepository, Depends(get_history_repository)]
+
+
 # -- current user / authorization ----------------------------------------------
 # auto_error=False: we raise domain AuthenticationError (mapped to 401) so the
 # error envelope stays consistent with the rest of the API.