Floatplane channel plugin for Jellyfin 10.10.x: browse, HLS proxy, cookie session, CI release

- IChannel: creators -> sub-channels -> video posts (public listing API, search mapped)
- IRequiresMediaInfoCallback -> signed proxy URLs; stream controller rewrites HLS so the
  AES-128 key is fetched server-side with the session cookie, segments stay on the CDN
- delivery/info cached per token lifetime and throttled (~2/min)
- config page: paste sails.sid + validate, extra creators, quality, search test
- scripts/package.sh -> plugin folder + zip + md5 + manifest.json; Gitea release workflow
- research docs, HAR analysis (HAR itself gitignored), install-pi5.sh

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

doc/research/reference-sources/fn_OAuthApi.kt

@@ -0,0 +1,49 @@
+package com.coulterpeterson.floatnative.api
+
+import retrofit2.http.Field
+import retrofit2.http.FormUrlEncoded
+import retrofit2.http.POST
+
+interface OAuthApi {
+
+    @FormUrlEncoded
+    @POST("realms/floatplane/protocol/openid-connect/token")
+    suspend fun getToken(
+        @retrofit2.http.Header("DPoP") dpop: String,
+        @Field("grant_type") grantType: String,
+        @Field("client_id") clientId: String,
+        @Field("code") code: String? = null,
+        @Field("code_verifier") codeVerifier: String? = null,
+        @Field("refresh_token") refreshToken: String? = null,
+        @Field("redirect_uri") redirectUri: String? = null,
+        @Field("device_code") deviceCode: String? = null
+    ): OAuthTokenResponse
+
+    @FormUrlEncoded
+    @POST("realms/floatplane/protocol/openid-connect/auth/device")
+    suspend fun startDeviceAuth(
+        @Field("client_id") clientId: String,
+        @Field("scope") scope: String = "openid offline_access"
+    ): DeviceCodeResponse
+}
+
+data class OAuthTokenResponse(
+    val access_token: String,
+    val expires_in: Int,
+    val refresh_token: String?,
+    val refresh_expires_in: Int?,
+    val token_type: String,
+    val id_token: String?,
+    val not_before_policy: Int?,
+    val session_state: String?,
+    val scope: String?
+)
+
+data class DeviceCodeResponse(
+    val device_code: String,
+    val user_code: String,
+    val verification_uri: String,
+    val verification_uri_complete: String?,
+    val expires_in: Int,
+    val interval: Int
+)