feat: add WatchMedium field, general review editing, configurable deploy

- WatchMedium enum (cinema/streaming/tv/physical_media/download/media_server/other)
- PATCH /api/v1/reviews/:id partial update (rating, comment, watched_at, watch_medium)
- edit_review use case w/ ownership + remote review guard, best-effort AP Update broadcast
- SPA: icon picker, edit sheet (long-press mobile / pencil desktop), watch medium badge
- shared ReviewFormFields, EditableContextMenu, parse_watched_at/format_watched_at
- deploy.sh parameterized (--features, --tag), CORS allows PATCH
- CONTEXT.md glossary, ADR-0001 general review editing

deploy.sh

@@ -1,9 +1,25 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-IMAGE="registry.gabrielkaszewski.dev/movies-diary:latest"
+REGISTRY="registry.gabrielkaszewski.dev"
+REPO="movies-diary"
+DEFAULT_FEATURES="sqlite,sqlite-federation,nats"
 
+features="${FEATURES:-$DEFAULT_FEATURES}"
+tag="latest"
+
+while [[ $# -gt 0 ]]; do
+  case $1 in
+    --features) features="$2"; shift 2 ;;
+    --tag)      tag="$2";      shift 2 ;;
+    *) echo "usage: $0 [--features F] [--tag T]" >&2; exit 1 ;;
+  esac
+done
+
+image="${REGISTRY}/${REPO}:${tag}"
+
+echo "building ${image}  features=${features}"
 docker buildx build --platform linux/amd64 \
-  --build-arg FEATURES=sqlite,sqlite-federation,nats \
-  -t "$IMAGE" --push .
-echo "pushed $IMAGE"
+  --build-arg FEATURES="$features" \
+  -t "$image" --push .
+echo "pushed $image"