Recover blocked searches, fall through to the next peer, rebuild the UI

Measured against a live instance: 47 failed jobs against 33 imported. Three
independent causes, all of which ended the request.

The Soulseek server filters some artist names. "Michael Jackson Billie Jean"
and bare "Michael Jackson" both return zero responses; "Billie Jean" returns
1083 files. The Weeknd, Kanye West and Frank Ocean behave the same way. Since
pick_and_enqueue sent exactly one query of `artist title`, every request for a
filtered artist failed reporting "searched 0 files" -- 28 of 29 occurrences.
search_queries() now walks a ladder, loosest last, ending at the bare title,
and escalates only when a search underdelivers so the common case still costs
one search. Dropping the artist from the query does not mean ignoring it:
match_ratio() looks for it in the folder path, where an organised share puts it.

A rejected transfer ended the request. pick_and_enqueue kept a running maximum
and discarded every runner-up, so "Transfer rejected: File not shared." -- a
per-file condition where candidate two almost always works -- was terminal, as
were timeouts and slskd's 500 on an unreachable peer. The ranked list is now
persisted on the job row, ordered to put a different peer next, and
try_next_candidate() advances through it. A job fails only once the list is
exhausted, and then reports every peer it tried and what each one said.

norm() destroyed every non-ASCII character, so "Beyonce" never matched
Beyonce, nor Bjork Bjork, nor Dont Don't. It now folds accents and drops
apostrophes while leaving & as a separator.

Also: availability outranks format in score(), because a FLAC behind 5000
queued users used to beat an immediately available MP3; transfers that stall or
that slskd forgets are abandoned instead of sitting in `downloading` forever;
searches are deleted only once finished, since deleting one mid-flight makes
slskd throw an optimistic-concurrency error and lose the record; a failed
search POST is retried rather than failing the job on one blip.

The UI moves to a sidebar shell -- rail at tablet, bottom bar on phones -- with
neutral chrome and the sampled artwork colour confined to hero areas rather
than repainting the whole interface. Adds URL routing, a primitive set under
components/ui, and a request sheet showing the attempt ladder. Fixes
hover:bg-glass-hi, which was never a valid class, so track rows and the search
field had no hover or focus state at all; a reduced-motion path that could
strand elements at opacity 0; the login page's hardcoded palette; and the
missing 404 and error boundaries.

tests/test_acquisition.py covers this path against a faked slskd. It had none.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

web/components/shell/toolbar.tsx

@@ -0,0 +1,73 @@
+"use client";
+
+import * as React from "react";
+import { LogOut } from "lucide-react";
+import { cn } from "@/lib/utils";
+import type { Me } from "@/lib/api";
+import { Badge } from "@/components/ui/badge";
+
+/**
+ * Sticky chrome over scrolling content: search on the left, identity on the
+ * right. Everything that used to be hidden below `sm:` — the quota chip, the
+ * display name — now degrades into the overflow rather than vanishing, since
+ * "how many requests do I have left" matters most on the device you are
+ * actually queueing from.
+ */
+export function Toolbar({
+  me,
+  quotaLeft,
+  children,
+}: {
+  me: Me | null;
+  quotaLeft: number | null;
+  children?: React.ReactNode;
+}) {
+  return (
+    <header className="material sticky top-0 z-30 border-b border-edge">
+      <div className="mx-auto flex w-full max-w-[var(--container-3xl)] items-center gap-3 px-4 py-2.5">
+        <div className="min-w-0 flex-1">{children}</div>
+
+        {me?.user && (
+          <div className="flex shrink-0 items-center gap-2">
+            {quotaLeft !== null && (
+              <Badge
+                tone={quotaLeft === 0 ? "err" : quotaLeft <= 5 ? "warn" : "neutral"}
+                title={`${me.usage!.requests} of ${me.quota} requests used this month`}
+                className="nums"
+              >
+                {quotaLeft} left
+              </Badge>
+            )}
+            {me.role && me.role !== "user" && (
+              <Badge tone="accent" className="hidden uppercase tracking-[0.06em] sm:inline-flex">
+                {me.role}
+              </Badge>
+            )}
+            {me.avatar && (
+              /* eslint-disable-next-line @next/next/no-img-element */
+              <img
+                src={me.avatar}
+                alt=""
+                className="h-7 w-7 rounded-full border border-edge object-cover"
+              />
+            )}
+            <span className="hidden max-w-[14ch] text-callout font-medium clamp1 lg:inline">
+              {me.display || me.user}
+            </span>
+            <a
+              href="/auth/logout"
+              title="Log out"
+              aria-label="Log out"
+              className={cn(
+                "focus-ring grid h-8 w-8 place-items-center rounded-control text-dim",
+                "transition-colors hover:bg-[var(--faint)] hover:text-ink",
+              )}
+            >
+              <LogOut className="h-4 w-4" />
+            </a>
+          </div>
+        )}
+      </div>
+    </header>
+  );
+}