Add review, discover, email; rebuild the design system

Three features and a typographic pass over everything.

REVIEW. Picking a file and trusting it are different questions, so they now
use different numbers. The existing rank decides which candidate to fetch and
is right to weigh peer upload slots and queue length -- but none of that says
anything about whether the file is the correct recording, and a fast peer must
not be able to raise the confidence of a wrong match. So confidence() scores
the filename alone: title 0.75, artist 0.25, album +0.05, and a variant tag
you did not ask for multiplies by 0.8 AND caps below the auto threshold.

Confidence gates the IMPORT, not the download. The transfer completes either
way and the file waits in downloads, so approving is instant and rejecting is
a delete. Holding the transfer instead would mean the peer is usually gone by
the time anyone looks.

The two cases it exists for: "02 Creep.flac" in an unsorted folder scores 0.75
-- title exactly right, artist simply absent, the commonest honest case there
is -- and must be reviewed rather than binned. And "Creep (Live at
Glastonbury)" scores 0.80 with BOTH artist and title perfect; the cap is what
stops a live recording auto-filing over the studio version. Ask for "Creep
(Acoustic)" and it auto-imports at 0.97, because then the variant is the
request.

DISCOVER. Related artists seeded from what you have actually imported, plus a
recap of top artists, genres and decades. Built on muse's own request history,
never on listening data: Navidrome owns play counts and history, and a second
source of truth for those would disagree with the one you listen through.

EMAIL. Optional, off unless MUSE_SMTP_HOST is set. Sends on import and on
review-needed. smtplib is blocking so it runs off the event loop, and every
failure is logged and swallowed -- a notification is never worth failing an
import over. Google accounts need no configuration, since the identity is an
address. Each user owns their own setting under Settings, deliberately not an
admin route: an address you cannot change yourself is someone else's chore.

DESIGN. A real type scale (display/title/headline/body/callout/caption) whose
tracking tightens as size grows, which is the single biggest tell of typography
nobody set. Specular top edges on glass surfaces -- blur alone reads as a grey
rectangle. A two-part elevation scale, contact shadow plus soft light. Semantic
colours are now per-theme: the amber tuned for the dark background failed
contrast outright on white, which was exactly the text a reviewer most needs to
read. The tab underline became a sliding pill so the eye tracks one object, and
Review only appears when something is actually waiting.

Add tests/test_matching.py: 13 assertions on the confidence bands rather than
the exact scores. 90 tests pass across the three suites.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

web/components/requests.tsx

@@ -16,6 +16,9 @@ export type JobsSnapshot = {
 const PILL: Record<Job["state"], string> = {
   imported: "text-ok border-ok/40 bg-ok/10",
   failed: "text-err border-err/40 bg-err/10",
+  // Held for review, not in flight and not finished — it needs a person, so
+  // it reads as the accent rather than as another in-progress amber.
+  review: "text-accent border-accent-line bg-accent-soft",
   downloading: "text-warn border-warn/40 bg-warn/10",
   searching: "text-warn border-warn/40 bg-warn/10",
   queued: "text-warn border-warn/40 bg-warn/10",
@@ -31,11 +34,12 @@ export function Requests({ snap, refresh }: { snap: JobsSnapshot | null; refresh
   const failed = counts.failed ?? 0;
   const total = active + done;
 
+  const held = counts.review ?? 0;
   const stats: [string, number, string][] = [
     ["In flight", active, "text-accent"],
     ["Imported", done, "text-ok"],
+    ["Held", held, held > 0 ? "text-warn" : ""],
     ["Failed", failed, "text-err"],
-    ["Waiting", pending, ""],
   ];
 
   return (
@@ -47,11 +51,13 @@ export function Requests({ snap, refresh }: { snap: JobsSnapshot | null; refresh
               key={n}
               initial={{ opacity: 0, y: -6 }}
               animate={{ opacity: 1, y: 0 }}
-              className={cn("block text-2xl font-bold leading-tight tracking-[-0.7px]", colour)}
+              className={cn("block text-title leading-none nums", colour)}
             >
               {n}
             </motion.b>
-            <span className="text-[11.5px] uppercase tracking-[0.6px] text-dim">{label}</span>
+            <span className="mt-1 block text-caption uppercase tracking-[0.6px] text-dim">
+              {label}
+            </span>
           </motion.div>
         ))}
       </div>
@@ -102,8 +108,8 @@ export function Requests({ snap, refresh }: { snap: JobsSnapshot | null; refresh
                 </div>
 
                 <div className="min-w-0 flex-1">
-                  <div className="text-[14.5px] font-semibold clamp1">{j.title}</div>
-                  <div className="mt-px text-[12.5px] text-dim clamp1">
+                  <div className="text-body font-semibold clamp1">{j.title}</div>
+                  <div className="mt-px text-callout text-dim clamp1">
                     {[j.artist, j.album, j.detail].filter(Boolean).join(" · ")}
                   </div>
                 </div>
@@ -125,7 +131,7 @@ export function Requests({ snap, refresh }: { snap: JobsSnapshot | null; refresh
                 <span
                   className={cn(
                     "shrink-0 whitespace-nowrap rounded-full border px-2.5 py-1",
-                    "text-[11px] font-semibold capitalize",
+                    "text-caption font-semibold capitalize",
                     PILL[j.state] ?? "text-dim border-edge",
                   )}
                 >