Add upload email notifications with Seafile direct-upload watcher; v2.0.6

- Portal uploads send one email immediately (host, episode, passage,
  description, filenames) via Resend to NUGGETS_NOTIFY_EMAIL
- Seafile watcher polls /Episode Upload every 15 min for direct uploads
  and sends a notification for any new file not already seen via portal
- Files uploaded through the portal are marked seen so the watcher
  never sends a duplicate notification
- Credentials kept out of git: SEAFILE_TOKEN, SEAFILE_NUGGETS_REPO_ID,
  NUGGETS_NOTIFY_EMAIL now sourced from docker .env file

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

server/routes/nuggets-host-upload.js

@@ -6,8 +6,11 @@ import rateLimit from 'express-rate-limit'
 import { createHash, timingSafeEqual } from 'node:crypto'
 import { parseCookies, cookieSecureFlag } from '../helpers.js'
 import { requireAdminAuth } from '../auth.js'
+import { sendNuggetsUploadNotification } from '../email.js'
+import { markSeafileFileSeen } from '../nuggets-seafile-watcher.js'
 import {
   NUGGETS_UPLOAD_HOSTS_FILE,
+  NUGGETS_NOTIFY_EMAIL,
   SEAFILE_URL,
   SEAFILE_TOKEN,
   SEAFILE_NUGGETS_REPO_ID,
@@ -241,6 +244,22 @@ export function register(app) {
       await uploadToSeafile(infoLink, infoBuffer, infoFilename, SEAFILE_EPISODE_INFO_DIR)
 
       console.log(`[nuggets-upload] ${session?.hostName ?? 'unknown'} uploaded "${episodeName}" (${originalName})`)
+
+      // Mark audio file as seen so the Seafile watcher doesn't double-notify
+      await markSeafileFileSeen(originalName)
+
+      // Send admin notification (fire-and-forget)
+      sendNuggetsUploadNotification({
+        to: NUGGETS_NOTIFY_EMAIL,
+        source: 'portal',
+        hostName: session?.hostName ?? '',
+        episodeName,
+        passage,
+        description,
+        filename: originalName,
+        infoFile: infoFilename,
+      }).catch(err => console.error('[nuggets-upload] notify error:', err))
+
       res.json({ ok: true, episodeName, filename: originalName, infoFile: infoFilename })
     } catch (err) {
       await unlink(tempPath).catch(() => {})