feat: OCR independent chunks + TMDb seed with file_uuid

- Rule 1 now creates OCR-only chunks instead of merging into ASRX
- generate_seed_embeddings.py supports --file-uuid parameter
- get_seeds() filters by file_uuid
- identity_matcher.py uses file_uuid for seed matching
- Push QDRANT_API_KEY to Python subprocesses
- Face clustering uses frame+bbox matching instead of face_id
- Portal uses JWT authentication
- FilesView filter logic fixed

portal/src/views/LoginView.vue

@@ -116,6 +116,9 @@ const handleLogin = async () => {
     if (data.success) {
       localStorage.setItem('momentry_user', JSON.stringify(data.user))
       localStorage.setItem('momentry_api_key', data.api_key)
+      if (data.jwt) {
+        localStorage.setItem('momentry_jwt', data.jwt)
+      }
       saveConfig({ ...config, api_key: data.api_key })
       const redirect = (route.query.redirect as string) || '/home'
       router.push(redirect)