feat(review): High quality playback switch and per-version ProRes download

Worker 1.7.0 (preview.highQuality, default on) now, after the AE render:
- encodes a High quality MP4 from the delivery MOV (full-res H.264 High,
  CRF 14 capped at 100 Mbps) -> Version.hqFileUrl
- uploads the MOV itself -> Version.highResKey/Filename/Size
Both best-effort (the preview never fails over them), with a lease
keep-alive during the long encode/uploads; the export timeline records
what was attached.

Player: HQ switch when a High quality source exists; keeps frame, play
state, speed and zoom, remembered per browser, falls back to Standard if
the file won't load. ProRes itself stays download-only (browser support).

Downloads: the client portal's High Res button serves the version's
ProRes (client-code filename), falling back to the shot's manual file;
staff get a ProRes button on the review page.

Housekeeping (lib/render-pipeline/high-res.ts): HQ MP4 + ProRes are kept
while a version is latest, client-shared, approved or younger than
preview.highResRetentionDays (14); otherwise deleted from storage. Runs
per task after finalize and hourly from the reaper; deleting a version or
a reslate removes its files. The Standard MP4 is never touched.

Also: ProRes/Handles top-bar buttons go icon-only below lg so they don't
overlap the version selector.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

app/api/ext/render/jobs/[jobId]/artifact-presign/route.ts

@@ -9,13 +9,15 @@ import { generateHetznerPresignedUploadUrl, sanitizeFileName } from "@/lib/stora
 //
 // Presigned upload URL for worker artifacts. Kinds map to the existing object
 // storage folder layout: preview → videos/, thumbnail → image/,
-// metadata/log → renders/.
+// metadata/log → renders/, highres (the delivery MOV) → highres/ beside the
+// manually uploaded High Res files.
 
 const KIND_FOLDERS: Record<string, string> = {
   preview: "videos",
   thumbnail: "image",
   metadata: "renders",
   log: "renders",
+  highres: "highres",
 };
 
 export async function POST(