feat: OCR independent chunks + TMDb seed with file_uuid

- Rule 1 now creates OCR-only chunks instead of merging into ASRX
- generate_seed_embeddings.py supports --file-uuid parameter
- get_seeds() filters by file_uuid
- identity_matcher.py uses file_uuid for seed matching
- Push QDRANT_API_KEY to Python subprocesses
- Face clustering uses frame+bbox matching instead of face_id
- Portal uses JWT authentication
- FilesView filter logic fixed

scripts/identity_matcher.py

@@ -79,10 +79,10 @@ def match_faces_round_1(file_uuid: str) -> dict:
         {trace_id: {identity_id, identity_uuid, name, score, suggested_by: 'tmdb'}}
     """
     traces = get_trace_representatives(file_uuid)
-    seeds = get_seeds(source="tmdb")
+    seeds = get_seeds(source="tmdb", file_uuid=file_uuid)
     
     if not seeds:
-        print("[MATCH] No TMDb seeds available")
+        print(f"[MATCH] No TMDb seeds available for {file_uuid}")
         return {}
     
     suggestions = {}