feat: release TypeType 1.4.0

[Priveetee]

Summary

• prepare TypeType 1.4.0 across Frontend, Server, Token and Downloader
• publish the 1.4.0 release notes
• add grouped search filters and consistent blocked-content enforcement
• deliver YouTube subtitles through the TypeType services
• add configurable account session lifetime
• advance each component pin to its reviewed main revision

Production behavior

• YouTube search supports upload date, content type, duration and sorting filters
• blocked channels and videos remain hidden across navigation and playback
• manual, automatic and translated YouTube subtitles use the same-origin Server path
• adaptive SABR initialization and chapter seeks recover reliably
• browser sessions survive temporary refresh outages
• unavailable YouTube Takeout videos are skipped during import
• large SABR downloads use bounded concurrent parts

Deployment requirements

• no database migration is required
• AUTH_SESSION_TTL_DAYS is optional, accepts 1 to 365 days and defaults to 30
• a configured YouTube proxy must remain reachable because Server and Token no longer silently bypass it
• the stable Compose stack must be pulled and recreated after all 1.4.0 component images are published

Tests

Frontend, Server, Token and Downloader CI workflows are the component release gates. Central stack CI is the final release gate. No additional local validation was run for this release.

Rollback

• keep TypeType 1.3.1 at 453c4dc as the previous stable release
• restore Frontend ghcr.io/typetype-video/typetype@sha256:4da200fb96d858cfa3bc2a8cbb98a9682a560f40a055b9c407f3e173a28dcf82
• restore Server ghcr.io/typetype-video/typetype-server@sha256:f1ad7fd31e5c1cb994601f714df82e8207c3769d759df232e21a3876751a8faf
• restore Token ghcr.io/typetype-video/typetype-token@sha256:8dfcc6d84cc09c33d18add0ec807093c2182be10857a021a4c61ace9a3f561d5
• restore Downloader ghcr.io/typetype-video/typetype-downloader@sha256:6b108d8c8d93781b61ab10feb01c5aa53d41f77bf2cccb5d910603dc27b31b84