MediaSession artwork weirdness on windows 11 with firefox

When playing a music file, the `Mediasession` artwork doesnt display on windows. After testing its because either windows / firefox decides to fetch the artwork themselves. And since their request doesnt have proper auth, its returning the e304 svg and being brokenly rendered. (shown the unauthenticated request)

I confirmed by turning the folder into a share and it displays fine.... kinda.

The artwork aspect ratio is off even tho its displaying properly on the browser

Just to confirm, i checked `navigator.mediaSession.metadata` and opened the artwork src manually and indeed its returning a weird image size

For the first part of the issue i was planning on making a PR where it first `fetch`es the artwork, converts it to a base64 then uses that for the artwork, but the weird aspect ratio of the thumbnail made me write this bug report first.

Also of note, the src of the thumbnail on the browser and mediasession has different query string.
Browser: `server.com/bla/song.flac?th=wf&cache=i&_=1Ek2e`
Mediasession: `server.com/bla/song.flac?th=j`
Im unfamiliar with the codebase and cryptic codes sooo idk wut these mean kekw

### To Reproduce
Just play a song on a server on a windows 11 machine using firefox ig

### Expected behavior
Everything to work

### Server details
remove the ones that are not relevant:
* Linux Arm64
* SFX
* copyparty v1.19.20 "usernames" (2025-11-02)
CPython v3.9.21 on Linux64 [GCC 11.5.0 20240719 (Red Hat 11.5.0-5.0.1)]
sqlite 3.34.1*1 | jinja 2.11.3 | pyftpd 1.5.10 | tftp 0.4.0

### Client details
* OS version: Windows 11 26100.2161
* browser version: Firefox dev editiron 145.0b9

Examine o tratamento de artwork do Media Session no código do frontend, provavelmente em arquivos JavaScript que servem a UI do player. Verifique como as URLs de artwork são geradas (observe os parâmetros de consulta como 'th=wf' em comparação com 'th=j') e como a autenticação é aplicada. Verifique a rota do lado do servidor que serve miniaturas ou artwork para entender por que as requisições não autenticadas recebem um SVG. Reproduza o problema reproduzindo uma música no Windows 11 com Firefox e inspecionando as requisições de rede.

Escrita pelo modelo de indexação a partir do texto da issue.