Restructure Settings nav, modernize import page, dedup/genres UX polish

Settings is now one top-nav entry with Credentials and Jobs as sidebar
sub-pages (jobs moved from /jobs to /settings/jobs). Manual import page
replaces the bare file input and free-text filename field with a drag-drop
dropzone and a proper file-picker table. Genres page drops the "force"
checkbox for two explicit buttons (Preview / Fix genres now). Dedup's
"Scan now" runs both the file-naming and acoustic passes together, and the
table labels which pass caught each candidate instead of showing the raw
pass name. .btn-ghost gets a visible border so it reads as a real button
next to Delete/Danger actions instead of looking unaligned. Job names
throughout the UI are now human-readable instead of raw job_key strings.

Also includes the fpcalc exit-code fix from earlier (fingerprint index
was discarding valid fingerprints on files with a benign decode warning).

app/services/dedup_review_service.py

@@ -119,6 +119,15 @@ async def scan_fuzzy(triggered_by: str = "manual") -> DedupRun:
     return await _run_scan("dedup:scan_fuzzy", _FUZZY_SCRIPT, triggered_by)
 
 
+async def scan_all(triggered_by: str = "manual") -> tuple[DedupRun, DedupRun]:
+    """Run both passes back to back for a single "Scan now" click -- each
+    call acquires and releases the shared pipeline lock on its own, so
+    running them sequentially here is safe, just one after the other."""
+    tag_run = await scan(triggered_by=triggered_by)
+    fuzzy_run = await scan_fuzzy(triggered_by=triggered_by)
+    return tag_run, fuzzy_run
+
+
 def _write_apply_args(script_name: str, script: str, group: list[DedupCandidate], stamp: int) -> list[str]:
     """Build the --apply invocation for one pass's confirmed group.