docs(arr-chain): TV + music search chains proven live; all-off new-row gotcha

serverAppConfigs-docs/Dankserver/qbittorrent.md

@@ -46,8 +46,11 @@ val = (base64.b64encode(salt) + b":" + base64.b64encode(h)).decode()
 
 Then `podman start qbittorrent` and confirm login survives a
 `podman restart` — the temp-password rotation stops the moment stored
-credentials verify. (The classic `@ByteArray(salt+hash)` form is WRONG for
-qb5: login 401s on it; verify() base64-decodes the two halves separately.)
+credentials verify. The chosen value lives host-local in
+`/home/dank/.qbpass` (mode 600, owner `dank`) — never in git; every arr
+download client and `prowlarr.md` reference it. (The classic
+`@ByteArray(salt+hash)` form is WRONG for qb5: login 401s on it; verify()
+base64-decodes the two halves separately.)
 
 ## Docker Compose