Add movie/series ratings and watchlist

Builds on the accounts foundation: PUT/DELETE a rating (0.5-10.0) or a
watchlist entry on any movie or series, all scoped to the bearer token's
own user, plus GET /account/ratings|watchlist/{movies,series} to list
them back. Both are polymorphic entity_type/entity_id tables, same shape
as watch_provider_offerings and trending_entries, so movie and series
share one repository/router each rather than duplicating per type.

Co-Authored-By: Claude Sonnet 5 <[email protected]>

app/api/v1/movies.py

@@ -8,10 +8,12 @@ from fastapi import APIRouter, Depends, HTTPException, Query, status
 from redis.asyncio import Redis
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.api.deps import cached_response, not_found
+from app.api.deps import cached_response, get_current_user, not_found
 from app.core.database import get_db
 from app.core.redis import get_redis
 from app.core.security import enforce_rate_limit
+from app.models.user import User
+from app.schemas.account import RatingIn, RatingOut
 from app.schemas.movie import (
     MovieCreditsOut,
     MovieDetailOut,
@@ -155,3 +157,52 @@ async def get_movie_watch_providers(
         return await movie_service.get_movie_watch_providers(session, aurora_id)
     except movie_service.MovieNotFoundError as exc:
         raise not_found("movie", aurora_id) from exc
+
+
+@router.put("/{aurora_id}/rating", response_model=RatingOut)
+async def rate_movie(
+    aurora_id: str,
+    body: RatingIn,
+    user: User = Depends(get_current_user),
+    session: AsyncSession = Depends(get_db),
+) -> RatingOut:
+    try:
+        return await movie_service.rate_movie(session, aurora_id, user_id=user.id, value=body.value)
+    except movie_service.MovieNotFoundError as exc:
+        raise not_found("movie", aurora_id) from exc
+
+
+@router.delete("/{aurora_id}/rating", status_code=status.HTTP_204_NO_CONTENT)
+async def unrate_movie(
+    aurora_id: str,
+    user: User = Depends(get_current_user),
+    session: AsyncSession = Depends(get_db),
+) -> None:
+    try:
+        await movie_service.unrate_movie(session, aurora_id, user_id=user.id)
+    except movie_service.MovieNotFoundError as exc:
+        raise not_found("movie", aurora_id) from exc
+
+
+@router.post("/{aurora_id}/watchlist", status_code=status.HTTP_204_NO_CONTENT)
+async def add_movie_to_watchlist(
+    aurora_id: str,
+    user: User = Depends(get_current_user),
+    session: AsyncSession = Depends(get_db),
+) -> None:
+    try:
+        await movie_service.add_movie_to_watchlist(session, aurora_id, user_id=user.id)
+    except movie_service.MovieNotFoundError as exc:
+        raise not_found("movie", aurora_id) from exc
+
+
+@router.delete("/{aurora_id}/watchlist", status_code=status.HTTP_204_NO_CONTENT)
+async def remove_movie_from_watchlist(
+    aurora_id: str,
+    user: User = Depends(get_current_user),
+    session: AsyncSession = Depends(get_db),
+) -> None:
+    try:
+        await movie_service.remove_movie_from_watchlist(session, aurora_id, user_id=user.id)
+    except movie_service.MovieNotFoundError as exc:
+        raise not_found("movie", aurora_id) from exc