refactor: fix HIGH+MEDIUM architectural violations from code review

HIGH: fix watch_medium data-loss bug, standardize error handling on
ApiError, fix dep direction (rss/template-askama no longer dep on
application), extract ImageFetcher port (remove reqwest from app layer),
move event construction from save_review to use case, extract
infra-wiring crate (DbPool/EventBusBackend dedup), deduplicate
presentation helpers (encode_error, export streaming, multipart parsing)

MEDIUM: split LocalApContentQuery god-trait 10→3 methods, dedup movie
resolution orchestration, add RemoteActorDto/PersonDto mappers, move
AppConfig to infra-wiring, fix SocialQueryPort Uuid→UserId, replace
stringly-typed api-types with domain enums, move count_reviews_in_year
to StatsRepository, dedup event publisher cfg blocks, extract
should_enrich, move group_by_month to application, dedup
count_local_posts, add FederationFlags Default, TUI input helper +
ShowError rename + typed auth errors, api-types cleanup
(UserSettingsDto/UserProfileBase/PreviewRowData)

102 files changed, -681 lines net

crates/application/src/goals/update.rs

@@ -4,7 +4,7 @@ use domain::{
     errors::DomainError,
     events::DomainEvent,
     models::GoalWithProgress,
-    ports::{EventPublisher, GoalRepository},
+    ports::{EventPublisher, GoalRepository, StatsRepository},
     value_objects::UserId,
 };
 
@@ -12,6 +12,7 @@ use super::commands::UpdateGoalCommand;
 
 pub async fn execute(
     goal: Arc<dyn GoalRepository>,
+    stats: Arc<dyn StatsRepository>,
     event_publisher: Arc<dyn EventPublisher>,
     cmd: UpdateGoalCommand,
 ) -> Result<GoalWithProgress, DomainError> {
@@ -25,7 +26,7 @@ pub async fn execute(
     g.update_target(cmd.target_count)?;
     goal.update(&g).await?;
 
-    let current_count = goal.count_reviews_in_year(&user_id, cmd.year).await?;
+    let current_count = stats.count_reviews_in_year(&user_id, cmd.year).await?;
 
     event_publisher
         .publish(&DomainEvent::GoalUpdated {