feat: add Telegram party queue with Library/Party navigation

[amitbreuer]

Summary

• Reuse the existing Telegram Mini App and bot with Library/Party navigation and Library-scoped Spotify login.
• Add verified Telegram sessions, isolated host PKCE playback authorization, guest invitations, moderation, and temporary room lifecycle.
• Resolve Spotify and Apple Music track links using real provider adapters and version-safe matching; no Apple user login.
• Add database-serialized outbox/Cloud Tasks delivery, uncertain-write protection, migrations, cleanup, Terraform, and deployment documentation.
• Feature is disabled by default pending live configuration and verification.

Validation

• Implementation session reports all five workspace builds and 89 tests passing: 39 provider/DNS, 15 catalog/auth, 15 native PostgreSQL/HTTP, 16 frontend, and 4 Chrome UI checks.
• Changed-source lint and Terraform validation pass.
• Full frontend lint retains 27 pre-existing errors in unchanged files.
• Docker image execution was not verified because the Docker daemon is unavailable.

Live release gates

• Configure and verify the Spotify app, Premium host eligibility, playback scopes and callback.
• Supply Apple Music developer signing credentials.
• Provision the database/cloud resources, apply production migrations, and verify OIDC-protected tasks/schedules.
• Verify actual HTTPS Telegram cookie and external-browser OAuth return behavior, then perform a deliberately authorized enqueue.
• No production configuration was changed and no real track was enqueued during implementation.

Review

Local visual preview: http://127.0.0.1:5197/app/?section=party (development configuration only; not live Telegram/provider proof).
The app enforces a username-prefixed local/session branch; this PR uses the existing pushed branch rather than bypassing the worktree branch manager.