feat: YouTube cookie'lerini panelden yönetilebilir hale getir

Cookie'ler saatler içinde eskiyordu, her seferinde manuel Coolify env
güncellemesi + redeploy gerekiyordu. Artık DB'de (app_settings tablosu)
tutuluyor; /settings sayfasından yeni cookies.txt yapıştırılıp
kaydedilebiliyor, bir sonraki yt-dlp çağrısında redeploy gerekmeden
devreye giriyor. YTDLP_COOKIES_B64 env var mekanizması kaldırıldı.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/api-daemon/src/ytdlpCookies.ts

@@ -1,7 +1,9 @@
 import { writeFileSync } from "node:fs";
+import { prisma } from "@streamclipper/db";
 import { env } from "./env";
 
 const COOKIES_PATH = "/tmp/yt-cookies.txt";
+const COOKIES_SETTING_KEY = "ytdlp_cookies";
 
 /**
  * YouTube's anti-bot layer against datacenter IPs has two parts, both
@@ -9,21 +11,20 @@ const COOKIES_PATH = "/tmp/yt-cookies.txt";
  * with an authenticated session's cookies) and a "The page needs to be
  * reloaded" proof-of-origin token check (avoided by querying the
  * bgutil-ytdlp-pot-provider sidecar — see docker-compose.yml sc_pot_provider).
- * The cookies file is never committed — it's decoded once at startup from a
- * Coolify-managed env var into a local temp file.
+ *
+ * Cookies rotate/expire over hours, so they're stored in the DB (updated
+ * from the panel's Settings page — see apps/frontend/app/settings) rather
+ * than baked in at container start from an env var. Every call re-reads the
+ * current value and rewrites the temp file, so a panel update takes effect
+ * on the very next yt-dlp invocation without a redeploy.
  */
-const cookiesFilePath: string | null = env.ytdlpCookiesB64
-  ? (() => {
-      writeFileSync(COOKIES_PATH, Buffer.from(env.ytdlpCookiesB64, "base64"), { mode: 0o600 });
-      return COOKIES_PATH;
-    })()
-  : null;
-
-export function ytdlpAntiBotArgs(): string[] {
+export async function ytdlpAntiBotArgs(): Promise<string[]> {
   const args: string[] = [];
 
-  if (cookiesFilePath) {
-    args.push("--cookies", cookiesFilePath);
+  const setting = await prisma.appSetting.findUnique({ where: { key: COOKIES_SETTING_KEY } });
+  if (setting?.value) {
+    writeFileSync(COOKIES_PATH, setting.value, { mode: 0o600 });
+    args.push("--cookies", COOKIES_PATH);
   }
 
   if (env.ytdlpPotProviderUrl) {