refactor: group use cases into DDD bounded contexts

Flat use_cases/ (44 files) + monolithic commands.rs/queries.rs
split into diary/, movies/, watchlist/, import/, auth/, users/,
integrations/, search/, person/, federation/ — each with own
commands.rs, queries.rs, and use case modules.

Inline tests extracted to sibling tests/ dirs.

crates/application/src/auth/tests/login.rs

@@ -0,0 +1,85 @@
+use std::sync::Arc;
+
+use domain::models::UserRole;
+use domain::testing::InMemoryUserRepository;
+
+use crate::{
+    auth::commands::RegisterCommand,
+    auth::queries::LoginQuery,
+    auth::{login, register},
+    test_helpers::TestContextBuilder,
+};
+
+async fn setup_user(ctx: &crate::context::AppContext, email: &str, password: &str) {
+    register::execute(
+        ctx,
+        RegisterCommand {
+            email: email.to_string(),
+            username: "testuser".to_string(),
+            password: password.to_string(),
+            role: UserRole::Standard,
+        },
+    )
+    .await
+    .unwrap();
+}
+
+#[tokio::test]
+async fn test_login_valid_credentials_returns_token() {
+    let users = InMemoryUserRepository::new();
+    let ctx = TestContextBuilder::new()
+        .with_users(Arc::clone(&users) as _)
+        .build();
+
+    setup_user(&ctx, "carol@example.com", "secret123").await;
+
+    let result = login::execute(
+        &ctx,
+        LoginQuery {
+            email: "carol@example.com".into(),
+            password: "secret123".into(),
+        },
+    )
+    .await
+    .unwrap();
+
+    assert!(!result.token.is_empty());
+    assert_eq!(result.email, "carol@example.com");
+}
+
+#[tokio::test]
+async fn test_login_wrong_password_fails() {
+    let users = InMemoryUserRepository::new();
+    let ctx = TestContextBuilder::new()
+        .with_users(Arc::clone(&users) as _)
+        .build();
+
+    setup_user(&ctx, "dave@example.com", "correct_password").await;
+
+    let result = login::execute(
+        &ctx,
+        LoginQuery {
+            email: "dave@example.com".into(),
+            password: "wrong_password".into(),
+        },
+    )
+    .await;
+
+    assert!(result.is_err());
+}
+
+#[tokio::test]
+async fn test_login_unknown_email_fails() {
+    let ctx = TestContextBuilder::new().build();
+
+    let result = login::execute(
+        &ctx,
+        LoginQuery {
+            email: "nobody@example.com".into(),
+            password: "anything".into(),
+        },
+    )
+    .await;
+
+    assert!(result.is_err());
+}

crates/application/src/auth/tests/register.rs

@@ -0,0 +1,48 @@
+use std::sync::Arc;
+
+use domain::models::UserRole;
+use domain::ports::UserRepository;
+use domain::testing::InMemoryUserRepository;
+use domain::value_objects::Email;
+
+use crate::{auth::commands::RegisterCommand, auth::register, test_helpers::TestContextBuilder};
+
+fn cmd(email: &str) -> RegisterCommand {
+    RegisterCommand {
+        email: email.to_string(),
+        username: "alice".to_string(),
+        password: "password123".to_string(),
+        role: UserRole::Standard,
+    }
+}
+
+#[tokio::test]
+async fn test_register_creates_user() {
+    let users = InMemoryUserRepository::new();
+    let ctx = TestContextBuilder::new()
+        .with_users(Arc::clone(&users) as _)
+        .build();
+
+    register::execute(&ctx, cmd("alice@example.com"))
+        .await
+        .unwrap();
+
+    let email = Email::new("alice@example.com".into()).unwrap();
+    let user = users.find_by_email(&email).await.unwrap().unwrap();
+    assert_eq!(user.email().value(), "alice@example.com");
+    assert!(user.password_hash().value().starts_with("hashed:"));
+}
+
+#[tokio::test]
+async fn test_register_duplicate_email_fails() {
+    let users = InMemoryUserRepository::new();
+    let ctx = TestContextBuilder::new()
+        .with_users(Arc::clone(&users) as _)
+        .build();
+
+    register::execute(&ctx, cmd("bob@example.com"))
+        .await
+        .unwrap();
+    let result = register::execute(&ctx, cmd("bob@example.com")).await;
+    assert!(result.is_err(), "duplicate email should fail");
+}