TautWeekly for Plex v0.9.6

v0.9.6 makes the direct Plex dependency for full rating and artwork fidelity
visible and testable across Windows, NAS/Docker, macOS, native Linux, and
FreeBSD/Podman.

Diagnosis and correction

Tautulli connectivity is sufficient for TautWeekly's supported core and
fallback newsletter path, but Tautulli may expose only the selected or
flattened rating. TautWeekly also queries Plex directly when it needs alternate
Rotten Tomatoes critic/audience values, an IMDb rating tied to an exact TV
episode, backgrounds, or selected logos.

The existing setup flows collected a direct Plex URL and token, but described
them as minor optional enrichment. The setup verifier then checked only
Tautulli, allowing a container to pass verification even when its configured
Plex URL was unreachable or unauthorized from inside that runtime. Preview and
SendTest could consequently render valid but reduced-fidelity output.

Setup and every maintained quickstart now recommend direct Plex for full
fidelity and explain that the URL must be reachable from the actual application
runtime. Verification invokes the same renderer-side configuration discovery
used by newsletters, then checks /identity and the authenticated
/library/sections endpoint. An invalid, unreachable, or unauthorized resolved
connection fails verification before Preview or SendTest. If no direct Plex
connection is configured at all, verification warns that Tautulli-only fallback
operation remains available with reduced metadata fidelity.

Container and service boundary

PlexServerUrl and PlexToken are TautWeekly settings. Whether that URL is
reachable is a runtime networking concern: localhost inside NAS/Docker or
Podman refers to the container unless host networking is used, and a native
service must have working routing, DNS, TLS trust, and firewall access. A
successful Tautulli check, Tautulli poster proxy, or host-browser request does
not prove that the TautWeekly runtime can make the direct Plex request.

Privacy and validation

The verifier sends the Plex token only as the X-Plex-Token request header. It
does not put the token in a URL, child-process command line, or status output,
and it does not persist Plex responses, media data, generated newsletters, or
private server details. Sanitized integration coverage verifies the identity
and authenticated library requests for all three maintained renderer sources
and confirms that the test server saw the token header on both requests.

This change does not require direct Plex for supported Tautulli-only fallback
operation and does not add external metadata searches. It detects the boundary
needed for the richer data already supported by TautWeekly.

Platform baselines

• Windows Portable 1.8.0
• NAS/Docker Portable 1.2.0
• macOS Portable 1.1.0
• Native Linux 1.1.0
• FreeBSD/Podman 1.1.0