feat(chroma): offer to remove a green or blue screen, and key it in the decode

TASK 64 slices D and E: the feature is usable end to end.

- Add a video file → one frame is probed (new `IChromaProbe`/`FfmpegChromaProbe`, one ffmpeg
  pass at 160x90, off the UI thread) and the layer gets an offer: "Looks like a green screen —
  Remove it", with the measured colour as a swatch.
- Accepting it turns the offer into settings (Amount / Softness / Fringe) that reach ffmpeg as
  `colorkey` + `despill` + `format=bgra`, so the key is computed in the pipe and both consumers
  (the shared preview bitmap and the compositor's frame) carry the same alpha.
- Media sessions are now keyed by **path + look** (`MainViewModel.MediaSessionKey`), so two
  layers with the same settings still share one decoder, and changing the look releases the old
  session and starts the new one. Removal, load reconciliation, loop and audio settings all move
  to the same key.
- Settings persist on the `Source` row (six ALTER TABLE guards + SELECT/INSERT), so a keyed layer
  comes back keyed.
- Panel section is plain creator words: Green/Blue Screen, Amount, Softness, Fringe.

Test: `ChromaKeyApplyTests` — the pipe asks ffmpeg to key (and does not when off); a green-screen
clip is offered, accepting it starts a keyed session, the layer's resolver then reads that session
rather than the old one; the setting survives a save.

Docs: TASK 64 D/E ticked with slice F (auto-apply setting + alert clips) left open; frame-pipeline
records the decode-option design; HANDOFF rewritten. verify.sh: 544 passed, 0 failed, 0 warnings.

Services/VideoClipPipe.cs

@@ -44,6 +44,7 @@ public sealed class VideoClipPipe : IDisposable
     private readonly IFrameRateProbe? _probe;
     private readonly Func<TimeSpan, CancellationToken, Task> _delay;
     private readonly bool _audio;
+    private readonly ChromaKeyOptions? _key;
     private readonly CancellationTokenSource _cts = new();
     private IDisposable? _run;
     private IDecodeProcess? _activeVideo;
@@ -57,7 +58,8 @@ public sealed class VideoClipPipe : IDisposable
         Func<IDecodeProcess> processFactory,
         IFrameRateProbe? frameRateProbe = null,
         Func<TimeSpan, CancellationToken, Task>? delay = null,
-        bool audio = true)
+        bool audio = true,
+        ChromaKeyOptions? chromaKey = null)
     {
         _path = path;
         _width = width;
@@ -67,6 +69,7 @@ public sealed class VideoClipPipe : IDisposable
         _probe = frameRateProbe;
         _delay = delay ?? ((t, ct) => Task.Delay(t, ct));
         _audio = audio;
+        _key = chromaKey;
     }
 
     public Task StartAsync(CancellationToken cancellationToken = default)
@@ -147,7 +150,7 @@ public sealed class VideoClipPipe : IDisposable
     {
         var args =
             $"-hide_banner -loglevel error -i \"{_path}\" " +
-            $"-f rawvideo -pix_fmt bgra -vf scale={_width}:{_height} -an -";
+            $"-f rawvideo -pix_fmt bgra -vf {VideoFilterChain.BuildVideo(_width, _height, _key)} -an -";
         using var process = _processFactory();
         _activeVideo = process;
         process.Start(new ProcessStartInfo