[KodeStar]

Closes #141, closes #142.

What changes

• Best match first (Matches sorted match %, currently mixed up #141). GET /admin/match-runs/{id}/items pages by score (descending, ties in recorded order). The cursor is still an item id: the next page reads on from that item's score, so a review paged 50 at a time sees the whole outcome in one order. No wire change.
• Match by hand over the review (Add Modal dialog for Match by Hand #142). The row's Match by hand opens the book page's match dialog as a modal over the review, which keeps its tab, picks and loaded pages. An icon beside it opens the book page in a new tab, to look closer or listen.
• A book matched since the run is left alone. A match run's book that has an ASIN or ISBN now (matched by hand from the review or its book page, by another admin, or a rescan found one) reads matched_since in the review with no changes, and an apply skips it with detail matched_since, under any scope (before, Use community values would write the run's match over it).
• A cover a stop cut short stays to apply (cover_pending), so the next apply takes it.
• MatchDialog loads its own book while open and shows a load error in place with a retry.

Verification

• Go: catalog ordering + paging across tied scores; runner test for matched-since (review flag, overwrite apply skips it); stopped-cover test. Console: review stays open, Escape closes only the inner dialog, an accepted hand match reads matched since and leaves the apply.
• Real browser (headless Chromium, real community matching): scores descend across the To review tab (100, 89 x6, 83, 77, 31); the hand-match dialog opens over the review; after accepting, the row reads "Matched since this run" with no checkbox, still so after a reload; Apply with Use community values left both hand-matched books untouched.
• Gates: build-admin, go build/vet/test -race, golangci-lint green (lone load timeouts in untouched backup/imports tests passed on rerun).

Docs: KodeStar/audiosilo-docs (docs/match-review-sort).