fix(templates): source-verify app templates and consolidate audit fixes

Consolidated template audit for 12 third-party apps. Each template was
checked against upstream source code so StarrProxy only grants
endpoints the app actually calls. Replaces and supersedes Notifiarr#98 and Notifiarr#99.

- Kometa (radarr+sonarr): add bulk import/editor, tag POST,
  languageprofile, seasonpass; sonarr add /series/import, /seasonpass,
  remove ineffective POST /series; radarr add GET /movie/{id} (live
  traffic confirmed Kometa fetches single-movie detail by ID, causing
  recurring 401s when only the bulk list was granted)
- Prowlarr (radarr+sonarr): add DELETE /indexer/{id}; remove unused
  testall, config/indexer*, indexerflag, system/status
- Maintainerr (radarr+sonarr): expand to full servarr helper surface
  (command, editor, history, qualityprofile, files, exclusions/bulk,
  tags)
- Seerr: replaces Jellyseerr + Overseerr templates (unified successor
  with automatic migration from either project); verified against
  seerr-team/seerr; add delete, episode/monitor, tag PUT
- Bazarr: add history endpoint; sonarr add languageprofile
- DAPS: expand to actual arrpy.py call surface (movie/series files,
  history, queue/bulk, delete paths)
- Unmanic: expand grants (queue, series, tag, qualityprofile,
  episodefile); add series/{id} GET for webhook rules
- Nabarr: trim to actual GET/POST calls only
- Omegabrr: add tag GET for tag-filter configs
- Recyclarr: remove unused command/{id}
- Cross-seed: remove prowlarr/cross-seed.json (only uses radarr/sonarr
  /parse)
- Titlecardmaker: remove unused rootfolder, series/lookup
- README: move Jellyseerr/Overseerr to removed list, Seerr is active
- CI: re-enable Renovate (.github/renovate.json) — `enabled: false` was
  added by a195176 with fork-scoped intent but landed on develop
  directly, disabling Renovate project-wide; restored to pre-a195176
  state

Closes Notifiarr#98, closes Notifiarr#99.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: bakerboy448

.github/renovate.json

@@ -1,6 +1,5 @@
 {
     "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-    "enabled": false,
     "extends": ["config:recommended", "docker:pinDigests"],
     "ignorePaths": ["**/compose.yml"],
     "customManagers": [

.vscode/settings.json

@@ -40,7 +40,6 @@
         "Cleanuparr",
         "DAPS",
         "everytime",
-        "Jellyseerr",
         "Kometa",
         "lidarr",
         "Maintainerr",
@@ -50,11 +49,11 @@
         "notifiarr's",
         "Omegabrr",
         "Organizr",
-        "Overseerr",
         "Prowlarr",
         "radarr",
         "readarr",
         "Recyclarr",
+        "Seerr",
         "sonarr",
         "starrproxy",
         "Unmanic",

README.md

@@ -39,7 +39,6 @@ There are some pre-built templates that enable just the api access the app actua
 - Cross-seed
 - DAPS
 - Homepage
-- Jellyseerr
 - Kometa
 - LunaSea
 - Maintainerr
@@ -48,7 +47,6 @@ There are some pre-built templates that enable just the api access the app actua
 - Nzb360
 - Omegabrr
 - Organizr
-- Overseerr
 - Postarr
 - Prowlarr
 - Qui\*
@@ -62,6 +60,8 @@ There are some pre-built templates that enable just the api access the app actua
 ### Removed templates
 
 - Huntarr: For obvious reasons.
+- Jellyseerr: Superseded by [Seerr](https://docs.seerr.dev/blog/seerr-release/) (merged with Overseerr into one project).
+- Overseerr: Superseded by [Seerr](https://docs.seerr.dev/blog/seerr-release/) (automatic migration on first startup).
 
 \* This app has a requirement of unique URLs instead of using a unique URL + API key combo so this means you will need to add a fake base to the url if you use multiple instances. Example: `http://10.1.0.100:9090/radarr1` or `http://starrproxy:80/radarr2`
 

root/app/www/public/templates/prowlarr/cross-seed.json

@@ -2,6 +2,9 @@
     "/api/v3/command": [
         "post"
     ],
+    "/api/v3/history": [
+        "get"
+    ],
     "/api/v3/mediacover/{movieId}/{filename}": [
         "get"
     ],

root/app/www/public/templates/radarr/bazarr.json

@@ -5,29 +5,45 @@
     "/api/v3/command/{id}": [
         "get"
     ],
-    "/api/v3/movie": [
+    "/api/v3/health": [
         "get"
     ],
-    "/api/v3/movie/editor": [
-        "put"
+    "/api/v3/history": [
+        "get"
     ],
-    "/api/v3/queue": [
+    "/api/v3/history/movie": [
         "get"
     ],
-    "/api/v3/system/status": [
+    "/api/v3/movie": [
         "get"
     ],
-    "/api/v3/tag": [
+    "/api/v3/movie/{id}": [
         "get",
-        "post"
+        "delete"
+    ],
+    "/api/v3/movie/editor": [
+        "put"
+    ],
+    "/api/v3/moviefile": [
+        "get"
+    ],
+    "/api/v3/moviefile/{id}": [
+        "delete"
     ],
     "/api/v3/qualityprofile": [
         "get"
     ],
-    "/api/v3/health": [
+    "/api/v3/queue": [
         "get"
     ],
     "/api/v3/rename": [
         "get"
+    ],
+    "/api/v3/system/status": [
+        "get"
+    ],
+    "/api/v3/tag": [
+        "get",
+        "post"
     ]
 }

root/app/www/public/templates/radarr/daps.json

@@ -5,28 +5,30 @@
     "/api/v3/movie": [
         "get"
     ],
+    "/api/v3/movie/{id}": [
+        "get"
+    ],
     "/api/v3/movie/lookup": [
         "get"
     ],
+    "/api/v3/movie/import": [
+        "post"
+    ],
+    "/api/v3/movie/editor": [
+        "put",
+        "delete"
+    ],
     "/api/v3/qualityprofile": [
         "get"
     ],
     "/api/v3/rootfolder": [
         "get"
     ],
-    "/api/v3/rootfolder/{id}": [
-        "get"
-    ],
     "/api/v3/system/status": [
         "get"
     ],
     "/api/v3/tag": [
-        "get"
-    ],
-    "/api/v3/movie/import": [
+        "get",
         "post"
-    ],
-    "/api/v3/movie/editor": [
-        "put"
     ]
 }

root/app/www/public/templates/radarr/jellyseerr.json

@@ -1,14 +1,41 @@
 {
+    "/api/v3/command": [
+        "post"
+    ],
+    "/api/v3/command/{id}": [
+        "get"
+    ],
+    "/api/v3/exclusions/bulk": [
+        "post"
+    ],
+    "/api/v3/history/movie": [
+        "get"
+    ],
     "/api/v3/movie": [
         "get"
     ],
     "/api/v3/movie/{id}": [
+        "get",
+        "put",
+        "delete"
+    ],
+    "/api/v3/movie/editor": [
+        "put"
+    ],
+    "/api/v3/moviefile": [
+        "get"
+    ],
+    "/api/v3/moviefile/{id}": [
         "delete"
     ],
+    "/api/v3/qualityprofile": [
+        "get"
+    ],
     "/api/v3/system/status": [
         "get"
     ],
     "/api/v3/tag": [
-        "get"
+        "get",
+        "post"
     ]
-}
+}

root/app/www/public/templates/radarr/kometa.json

@@ -1,32 +1,17 @@
 {
     "/api/v3/exclusions": [
-        "get",
-        "post"
+        "get"
     ],
-    "/api/v3/exclusions/{id}": [
-        "put",
-        "delete",
+    "/api/v3/movie/lookup": [
         "get"
     ],
     "/api/v3/movie": [
-        "get",
         "post"
     ],
-    "/api/v3/movie/{id}": [
-        "put",
-        "delete",
-        "get"
-    ],
     "/api/v3/qualityprofile": [
-        "post",
-        "get"
-    ],
-    "/api/v3/qualityprofile/{id}": [
-        "delete",
-        "put",
         "get"
     ],
     "/api/v3/system/status": [
         "get"
     ]
-}
+}