feat(scanner): force rescan = original scan; feat(filters): the manually-edited filter (faceted plan Phase 13)

Force rescan contract change (owner-directed): the editorial-keep skip
is retired. Force rescan now re-derives EVERY field on EVERY book from
all sources — multi-file books included (the folder/zip flows ran the
full chain on create and on manifest-flagged edits, but skipped the
sidecar apply under force). metadata_overrides is the only protection:
ApplyMetadataOverrides re-applies manual values inside the writer, so
manual edits survive; everything else re-derives.

- A force pass also STAMPS each re-derived book's manifest with the
  current parser version (success-only — same truthfulness rule as
  Phase 10) and closes its open processing issues (Phase 11 self-heal).
  Force rescan and the ev-bump trickle now converge: either leaves the
  library fully current; the deploy order is bump-first, then Rescan
  All (documented in the plan and contract_pins).
- Single-file force rescan already ran the full chain — unchanged,
  now pinned.

NEW filter field manually_edited ("Manually edited", boolean):
cardinality(mi.metadata_overrides) > 0 / = 0. Composed-engine (qf)
only — the builder's Book facts group gains it with is true/false;
no value menu, no suggestion surface; family lens inherited.

Tests: multifile force applies sidecar metadata + stamps + override
protection; single-file pin; the filter both directions scoped to the
test library; adjacent suites (Audiobook, Calibre, ExtractorVersion,
CrossLibraryMove, ProcessingIssues, FilterBuilder, SchemaIdempotency)
green. The extractor mechanism itself is untouched — the owner bumps
scan_extractor_version manually via the admin UI (plan Phase 13 §3).

internal/services/media_scanner_audio_multifile.go

@@ -951,10 +951,11 @@ func (s *MediaScanner) processAudioFolderBook(ctx context.Context, rootDir strin
 			// ordering): the generic update's format-group pass derives the
 			// mime from the sentinel (none) and chapters from
 			// metadata.ChapterCount (unset) — the focused payload write below
-			// must win. Force rescan keeps the editorial-keep contract (the
-			// per-book RescanMediaItem is the editorial tool), so it skips
-			// the apply even when the ladder flagged a drift it caused.
-			if manifestChanged && !s.forceRescan {
+			// must win. Force rescan applies TOO (faceted plan Phase 13:
+			// force rescan = original-scan semantics — the full chain
+			// re-lands on every field, with metadata_overrides as the only
+			// protection, honored inside the apply).
+			if manifestChanged || s.forceRescan {
 				if applyErr := s.applyMultiFileSidecarEdit(ctx, existing, sentinel, metadata); applyErr != nil {
 					fmt.Printf("Warning: %v\n", applyErr)
 				} else {
@@ -1191,10 +1192,16 @@ func (s *MediaScanner) processZipAudioBook(ctx context.Context, zipPath string,
 		changed := existing.FileSize.Int64 != totalSize || !audioPayloadTracksEqual(existing.AudioMetadata, payload)
 		if changed || s.forceRescan || manifestChanged {
 			// Editorial apply BEFORE the payload write — see the folder
-			// processor for the format-group ordering rationale.
-			if manifestChanged && !s.forceRescan {
+			// processor for the format-group ordering rationale. Force
+			// rescan applies too (Phase 13: original-scan semantics,
+			// metadata_overrides honored inside the apply).
+			if manifestChanged || s.forceRescan {
 				if applyErr := s.applyMultiFileSidecarEdit(ctx, existing, zipPath, metadata); applyErr != nil {
 					fmt.Printf("Warning: %v\n", applyErr)
+				} else {
+					// Ledger self-heal (Phase 11): the book's metadata
+					// re-applied successfully — close its open issues.
+					s.resolveIssuesForItem(ctx, existing.ID)
 				}
 				s.storeMultiFileManifest(ctx, libraryID, zipPath, zipPath, filepath.Dir(zipPath))
 			}