feat: add secure peer quick links

[roziscoding]

Summary

• add a ConfigSecret-backed external Jack access profile
• generate dedicated, revocable jack-link:v1 credentials through the management API
• add secure copy/import flows that prefill the existing editable peer form
• validate URL credentials, reserved/dangerous/duplicate headers, payload size, and API-key cleanup on failure

Verification

• 511 tests pass
• backend and UI typechecks pass
• lint passes
• Nuxt production build passes
• independent security/code review approved the remediated diff

[greptile-apps]

Greptile Summary

The PR adds revocable, credential-bearing peer quick links backed by an external Jack access profile, with management API generation and UI import/review flows.

• Adds raw and resolved external-access configuration with serialized, field-preserving updates.
• Generates one-time quick links using newly issued peer API keys and revokes keys when link creation fails.
• Validates imported links, URLs, headers, credentials, and payload size before prefilling the peer form.
• Adjusts Radarr manual-import discovery to scan the download folder while associating the movie in the command payload.

Confidence Score: 5/5

The PR appears safe to merge because no blocking failure remains in the eligible follow-up scope.

No blocking failure remains.

_{Reviews (5): Last reviewed commit: "chore: fix linter errors" | Re-trigger Greptile}