fix: CMS image proxy + partial unique index for soft-deleted releases

DeepDrftManager/Components/Pages/Tracks/CmsAlbumBrowser.razor

@@ -2,7 +2,6 @@
 @using DeepDrftManager.Services
 @using DeepDrftModels.DTOs
 @inject ICmsTrackService CmsTrackService
-@inject IHttpClientFactory HttpClientFactory
 @inject IDialogService DialogService
 @inject ISnackbar Snackbar
 @inject ILogger<CmsAlbumBrowser> Logger
@@ -126,13 +125,6 @@ else
     // back. We only re-project when the parent hands us a genuinely new list.
     private IReadOnlyList<ReleaseDto>? _projectedReleases;
 
-    // The cover-art endpoint (GET api/image/{entryKey}) lives on DeepDrftAPI and is unauthenticated,
-    // so the browser hits it directly. Base address comes from the same named client the CMS uses.
-    private Uri? _contentApiBase;
-
-    protected override void OnInitialized() =>
-        _contentApiBase = HttpClientFactory.CreateClient("DeepDrft.Content.Cms").BaseAddress;
-
     // Re-project rows only when the parent supplies a genuinely new release list (reference change).
     // Local edits to _rows (a removed row after delete) must survive re-renders triggered by the
     // same cached VM.Albums instance.
@@ -145,10 +137,9 @@ else
         }
     }
 
-    private string? ThumbUrl(string imagePath) =>
-        _contentApiBase is null
-            ? null
-            : new Uri(_contentApiBase, $"api/image/{Uri.EscapeDataString(imagePath)}").ToString();
+    // Relative path — resolves against the Manager's own origin, proxied by ImageProxyController.
+    private static string ThumbUrl(string imagePath) =>
+        $"/api/image/{Uri.EscapeDataString(imagePath)}";
 
     private async Task ToggleExpand(AlbumRow row)
     {