chore: initial project scaffold

Set up Mangalord with a Rust/axum backend, SvelteKit frontend, Postgres,
and Docker Compose deployment. Establishes the architecture and TDD
patterns the project will extend:

- Hexagonal-ish backend layering (domain / repo / storage / api) with
  a pluggable Storage trait (LocalStorage today, S3 as a future impl).
- Initial migration: users, mangas, chapters, bookmarks.
- Vertical slice for mangas (list, search, create, get) with
  #[sqlx::test] integration coverage and storage unit tests.
- SvelteKit frontend using Svelte 5 runes, typed API client, Vitest
  unit tests and Playwright e2e with route mocking.
- CLAUDE.md documenting layering, TDD/git/SemVer workflow rules, and
  extension points (tags, fulltext search, OCR, S3, auth).
- Project-scoped .claude/settings.json with permission allowlist for
  the toolchain (git, cargo, npm/vite, docker, psql, gh, doc fetches).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

backend/src/api/files.rs

@@ -0,0 +1,39 @@
+//! Serves blobs from the `Storage` trait. Same endpoint serves manga
+//! covers and chapter pages; the key embedded in the URL is whatever
+//! the writer stored.
+
+use axum::extract::{Path, State};
+use axum::http::header;
+use axum::response::{IntoResponse, Response};
+use axum::routing::get;
+use axum::Router;
+
+use crate::app::AppState;
+use crate::error::AppResult;
+use crate::storage::StorageError;
+
+pub fn routes() -> Router<AppState> {
+    Router::new().route("/files/*key", get(serve))
+}
+
+async fn serve(State(state): State<AppState>, Path(key): Path<String>) -> AppResult<Response> {
+    let bytes = match state.storage.get(&key).await {
+        Ok(b) => b,
+        Err(StorageError::NotFound) => return Err(crate::error::AppError::NotFound),
+        Err(e) => return Err(e.into()),
+    };
+    let ct = content_type_for(&key);
+    Ok(([(header::CONTENT_TYPE, ct)], bytes).into_response())
+}
+
+fn content_type_for(key: &str) -> &'static str {
+    let ext = key.rsplit('.').next().unwrap_or("").to_ascii_lowercase();
+    match ext.as_str() {
+        "jpg" | "jpeg" => "image/jpeg",
+        "png" => "image/png",
+        "webp" => "image/webp",
+        "gif" => "image/gif",
+        "avif" => "image/avif",
+        _ => "application/octet-stream",
+    }
+}

backend/src/api/health.rs

@@ -0,0 +1,12 @@
+use axum::{routing::get, Json, Router};
+use serde_json::{json, Value};
+
+use crate::app::AppState;
+
+pub fn routes() -> Router<AppState> {
+    Router::new().route("/health", get(health))
+}
+
+async fn health() -> Json<Value> {
+    Json(json!({ "status": "ok" }))
+}

backend/src/api/mangas.rs

@@ -0,0 +1,59 @@
+use axum::extract::{Path, Query, State};
+use axum::routing::get;
+use axum::{Json, Router};
+use serde::Deserialize;
+use uuid::Uuid;
+
+use crate::app::AppState;
+use crate::domain::manga::{Manga, NewManga};
+use crate::error::{AppError, AppResult};
+use crate::repo;
+
+pub fn routes() -> Router<AppState> {
+    Router::new()
+        .route("/mangas", get(list).post(create))
+        .route("/mangas/:id", get(get_one))
+}
+
+#[derive(Debug, Deserialize)]
+pub struct ListParams {
+    #[serde(default)]
+    pub search: Option<String>,
+    #[serde(default = "default_limit")]
+    pub limit: i64,
+    #[serde(default)]
+    pub offset: i64,
+}
+
+fn default_limit() -> i64 {
+    50
+}
+
+async fn list(
+    State(state): State<AppState>,
+    Query(params): Query<ListParams>,
+) -> AppResult<Json<Vec<Manga>>> {
+    let q = repo::manga::ListQuery {
+        search: params.search.filter(|s| !s.trim().is_empty()),
+        limit: params.limit.clamp(1, 200),
+        offset: params.offset.max(0),
+    };
+    Ok(Json(repo::manga::list(&state.db, &q).await?))
+}
+
+async fn get_one(
+    State(state): State<AppState>,
+    Path(id): Path<Uuid>,
+) -> AppResult<Json<Manga>> {
+    Ok(Json(repo::manga::get(&state.db, id).await?))
+}
+
+async fn create(
+    State(state): State<AppState>,
+    Json(input): Json<NewManga>,
+) -> AppResult<Json<Manga>> {
+    if input.title.trim().is_empty() {
+        return Err(AppError::InvalidInput("title is required".into()));
+    }
+    Ok(Json(repo::manga::create(&state.db, input).await?))
+}

backend/src/api/mod.rs

@@ -0,0 +1,14 @@
+pub mod files;
+pub mod health;
+pub mod mangas;
+
+use axum::Router;
+
+use crate::app::AppState;
+
+pub fn routes() -> Router<AppState> {
+    Router::new()
+        .merge(health::routes())
+        .merge(mangas::routes())
+        .merge(files::routes())
+}