- Add -pix_fmt yuv420p to multi_res_output.py libx264 path so browsers
can decode CPU-encoded segments (was producing yuv444p / High 4:4:4).
- Switch silent auth check and coop fragment middlewares from opt-out
blocklists to opt-in: only run for GET requests with Accept: text/html.
Prevents unnecessary nav-tree/auth-menu HTTP calls on every HLS segment,
IPFS proxy, and API request.
- Add opaque grant token verification to L1/L2 dependencies.
- Migrate client CLI to device authorization flow.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The hardcoded h264_nvenc encoder fails on CPU-only workers. Now uses
check_nvenc_available() to auto-detect and falls back to libx264.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
