feat(tracks): Highly Rated rail + per-card star display (#443)

* feat(tracks): Highly Rated rail + per-card star display

Adds a new SongRail above the Random Pick on the Tracks page that
surfaces the user's highly-rated tracks (sorted by rating DESC).
Auto-hides on non-Navidrome servers and when the library has no
rated tracks yet. Reuses the existing SongRail layout, with the
standard reroll button forcing a cache bypass.

Per-card stars: any SongCard whose `userRating > 0` now shows a
small five-star row (filled to the rating value) below the artist
line — visible everywhere SongCard is used, not only in the new
rail. Read-only display; rating is still done via the row's
context menu or the Now Playing star widget.

Cache layer in `ndListSongs`: opt-in `cacheMs` parameter (skipped
by VirtualSongList; used only by the Highly Rated rail with a 60 s
TTL). Cleared on `setRating` mutation so a freshly-rated track
shows up on the next page revisit, and on server switch alongside
the existing token cache. The reroll button explicitly invalidates
before refetching, so a manual refresh always hits the network.

* docs(changelog): add #443 Tracks Highly Rated rail entry

* chore(credits): add #443 to Psychotoxical contributions

src/api/subsonic.ts

@@ -959,6 +959,11 @@ export async function searchSongsPaged(query: string, songCount: number, songOff
 
 export async function setRating(id: string, rating: number): Promise<void> {
   await api('setRating.view', { id, rating });
+  // Cached song lists keyed by rating (e.g. Tracks → Highly Rated rail) become
+  // stale immediately. Lazy-import to keep the module dep direction
+  // subsonic ← navidromeBrowse and avoid pulling Tauri internals into shared
+  // type-only consumers.
+  void import('./navidromeBrowse').then(m => m.ndInvalidateSongsCache()).catch(() => {});
 }
 
 /** How aggressively we assume `setRating` accepts album/artist ids (OpenSubsonic-style). */