Fix item visibility bugs and add effects web UI

- Fix recipe filter to allow owner=None (S-expression compiled recipes)
- Fix media uploads to use category (video/image/audio) not MIME type
- Fix IPFS imports to detect and store correct media type
- Add Effects navigation link between Recipes and Media
- Create effects list and detail templates with upload functionality
- Add cache/not_found.html template (was missing)
- Add type annotations to service classes
- Add tests for item visibility and effects web UI (30 tests)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/services/auth_service.py

@@ -5,13 +5,17 @@ Auth Service - token management and user verification.
 import hashlib
 import base64
 import json
-from typing import Optional
+from typing import Optional, Dict, Any, TYPE_CHECKING
 
 import httpx
 
 from artdag_common.middleware.auth import UserContext
 from ..config import settings
 
+if TYPE_CHECKING:
+    import redis
+    from starlette.requests import Request
+
 
 # Token expiry (30 days to match token lifetime)
 TOKEN_EXPIRY_SECONDS = 60 * 60 * 24 * 30
@@ -24,7 +28,7 @@ USER_TOKENS_PREFIX = "artdag:user_tokens:"
 class AuthService:
     """Service for authentication and token management."""
 
-    def __init__(self, redis_client):
+    def __init__(self, redis_client: "redis.Redis[bytes]") -> None:
         self.redis = redis_client
 
     def register_user_token(self, username: str, token: str) -> None:
@@ -66,7 +70,7 @@ class AuthService:
         key = f"{REVOKED_KEY_PREFIX}{token_hash}"
         return self.redis.exists(key) > 0
 
-    def decode_token_claims(self, token: str) -> Optional[dict]:
+    def decode_token_claims(self, token: str) -> Optional[Dict[str, Any]]:
         """Decode JWT claims without verification."""
         try:
             parts = token.split(".")
@@ -126,7 +130,7 @@ class AuthService:
 
         return ctx
 
-    def get_user_from_cookie(self, request) -> Optional[UserContext]:
+    def get_user_from_cookie(self, request: "Request") -> Optional[UserContext]:
         """Extract user context from auth cookie."""
         token = request.cookies.get("auth_token")
         if not token: