Release 0.3.4: Jellyfin 12 stable support and audit fixes

Harden proxy permissions and cache behavior, streamline metadata fetching, remove obsolete rules, and validate the stable SDK with expanded regression coverage. Document backup format changes.

tools/run_jellyfin12_browser_tests.py

@@ -144,6 +144,14 @@ for row in rows:
         INSERT INTO genres(tmdb_id, media, lang, name, name_norm) VALUES (?, 'movie', 'fi', ?, ?)
         ON CONFLICT(tmdb_id, media, lang) DO UPDATE SET name=excluded.name, name_norm=excluded.name_norm
     """, (row["genre_id"], row["genre"], row["genre"].lower()))
+    relative = row["item_id"] + "/fixture.png"
+    destination = os.path.join(os.path.dirname(database), "assets", relative)
+    os.makedirs(os.path.dirname(destination), exist_ok=True)
+    with open(destination, "wb") as image:
+        image.write(base64.b64decode("iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+jZ1kAAAAASUVORK5CYII="))
+    path = "/Multilang/Assets/" + relative
+    connection.execute("INSERT OR REPLACE INTO assets(item_id,lang,kind,path,path_low,updated_at) VALUES (?, 'fi', 'poster', ?, ?, ?)",
+                       (row["item_id"], path, path.lower(), now))
 connection.commit()
 '''
     remote.stop()