feat: atomic wrapup, movie, integration writes

Ride writes: WrapUpRequested/Completed (wrapup create/set_complete),
MovieDiscovered (resolve upsert, new+ext id only), PosterSynced (poster
handler upsert), MovieDeleted (delete_movie), WatchEventIngested (save).
Deps drop event_publisher: wrapup, ingest, delete_review, watchlist add,
review logger.

Remaining .publish( sites:
announce-only: users/delete_account UserDeleted, person/get +
get_credits PersonEnrichmentRequested, jobs/enrichment_staleness,
http-axum search, movies/sync_poster + poster_sync_handler +
image-converter backfill + users/update_profile ImageStored (object
storage), activitypub federation_event_bridge (reacting to events).
rides write, deferred: social/execute (see report),
activitypub review_handler MovieEnrichmentRequested (after
save_remote_review).

crates/application/tests/integrations/ingest_test.rs

@@ -2,8 +2,7 @@ use crate::support::generate_webhook_token_command;
 use std::sync::Arc;
 
 use domain::models::WatchEventSource;
-use domain::ports::EventPublisher;
-use domain::testing::{InMemoryStore, NoopEventPublisher};
+use domain::testing::{InMemoryStore, RefusingWatchEventCommand};
 use uuid::Uuid;
 
 use application::integrations::commands::IngestWatchEventCommand;
@@ -27,10 +26,9 @@ impl domain::ports::MediaServerParser for FakeParser {
 }
 
 #[tokio::test]
-async fn ingests_watch_event() {
+async fn ingesting_saves_the_watch_event_and_records_its_event_together() {
     let tokens = InMemoryStore::new();
     let watch_events = Arc::clone(&tokens);
-    let event_publisher: Arc<dyn EventPublisher> = NoopEventPublisher::new();
 
     let user_id = Uuid::new_v4();
     let generated = generate_token::execute(
@@ -46,7 +44,6 @@ async fn ingests_watch_event() {
         webhook_token: Arc::clone(&tokens) as _,
         watch_event_command: Arc::clone(&watch_events) as _,
         watch_event_query: Arc::clone(&watch_events) as _,
-        event_publisher: Arc::clone(&event_publisher),
     };
 
     let result = ingest::execute(
@@ -61,19 +58,58 @@ async fn ingests_watch_event() {
     .await;
 
     assert!(result.is_ok());
+    assert_eq!(watch_events.rows_in("watch_events"), 1);
+    let recorded = tokens.recorded_events();
+    assert_eq!(recorded.len(), 1);
+    assert!(matches!(
+        &recorded[0],
+        domain::events::DomainEvent::WatchEventIngested { title, .. } if title == "Test"
+    ));
+}
+
+#[tokio::test]
+async fn a_refused_save_propagates_and_records_nothing() {
+    let tokens = InMemoryStore::new();
+    let user_id = Uuid::new_v4();
+    let generated = generate_token::execute(
+        &GenerateWebhookTokenDeps {
+            webhook_token: Arc::clone(&tokens) as _,
+        },
+        generate_webhook_token_command(user_id),
+    )
+    .await
+    .unwrap();
+    let deps = IngestWatchEventDeps {
+        webhook_token: Arc::clone(&tokens) as _,
+        watch_event_command: Arc::new(RefusingWatchEventCommand),
+        watch_event_query: Arc::clone(&tokens) as _,
+    };
+
+    let result = ingest::execute(
+        &deps,
+        IngestWatchEventCommand {
+            token: generated.token_plaintext,
+            raw_payload: vec![],
+            source: WatchEventSource::Jellyfin,
+        },
+        &FakeParser,
+    )
+    .await;
+
+    assert!(result.is_err());
+    assert_eq!(tokens.rows_in("watch_events"), 0);
+    assert!(tokens.recorded_events().is_empty());
 }
 
 #[tokio::test]
 async fn rejects_invalid_token() {
     let tokens = InMemoryStore::new();
     let watch_events = Arc::clone(&tokens);
-    let event_publisher: Arc<dyn EventPublisher> = NoopEventPublisher::new();
 
     let deps = IngestWatchEventDeps {
         webhook_token: Arc::clone(&tokens) as _,
         watch_event_command: Arc::clone(&watch_events) as _,
         watch_event_query: Arc::clone(&watch_events) as _,
-        event_publisher: Arc::clone(&event_publisher),
     };
 
     let result = ingest::execute(