feat: initial ROM & emulator manager plugin (M0–M5)

A punktfunk-plugin-* package that scans ROM directories, maps them to
emulators, fetches box art, and reconciles them into the host game library
under provider id `rom-manager` — with a console-hosted web UI.

Engine (pure, unit-tested core):
- Table-driven platform registry (~25 consoles) + emulator registry with
  best-effort per-OS detection (PATH / Flatpak / known paths) and RetroArch
  core discovery.
- Scanner with disc folding (m3u/cue/gdi), archive gating, excludes.
- No-Intro title parsing + optional per-platform region dedupe.
- Security-critical quoting seam: POSIX single-quote + Windows double-quote
  with hostile-name refusal; ROM filenames never reach a shell un-quoted.
- Pure desired-state reconcile (stable external_ids, scale guard, fingerprint
  skip) → full-replace PUT /library/provider/rom-manager.

Box art (like Steam ROM Manager): SteamGridDB primary (portrait/hero/logo/
header, fuzzy match, operator API key) behind a provider seam, with keyless
libretro-thumbnails as the zero-setup fallback (`auto` default).

UI: console-hosted via the SDK `servePluginUi` (zero plugin-side auth) with a
plugin-local REST/SSE API and a self-contained React SPA (Setup / Emulators /
Games / Sync). Standalone password-gated fallback for host-only installs.

CLI: scan / detect / preview / sync / uninstall / set-password.

48 engine tests, typecheck + biome clean, SPA builds. Verified end-to-end:
scan → detect → reconcile PUT, fingerprint idempotence, and the standalone
UI serving SPA + REST.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/server/index.ts

@@ -0,0 +1,32 @@
+// The console-hosted UI server (design §9, primary path). `servePluginUi` from the SDK owns the whole
+// plugin side — a loopback ephemeral port behind a per-boot secret, registration + lease renewal with
+// the host, and the console reverse-proxy contract — so we just hand it the built SPA directory and the
+// plugin-local API router. The operator signs into the console once; the "ROM Manager" nav entry
+// appears automatically. Zero human auth here.
+
+import {
+	type PluginUiHandle,
+	type Punktfunk,
+	servePluginUi,
+} from "@punktfunk/host";
+import { PLUGIN_NAME, UI_ICON, UI_TITLE } from "../const.js";
+import type { Engine } from "../engine/index.js";
+import { makeRouter } from "./router.js";
+
+/**
+ * Serve the UI through the console. `../../dist/ui` resolves to `<repo>/dist/ui` whether this module
+ * runs from source (`src/server/index.ts`) or built (`dist/server/index.js`).
+ */
+export const serveConsoleUi = (
+	pf: Punktfunk,
+	engine: Engine,
+	opts?: { version?: string },
+): Promise<PluginUiHandle> =>
+	servePluginUi(pf, {
+		id: PLUGIN_NAME,
+		title: UI_TITLE,
+		icon: UI_ICON,
+		version: opts?.version,
+		staticDir: new URL("../../dist/ui", import.meta.url),
+		fetch: makeRouter(engine),
+	});