Add Parakeet (HuggingFace) cloud transcription tab (#307)

[maboa]

Closes #307.

Adds a third Cloud transcription engine: NVIDIA Parakeet TDT 0.6B v3 served through HuggingFace's inference router, called directly from the browser with the user's own HF token — no server.

Verification (the reason #307 is unblocked)

Re-checked against the live endpoint with a real token:

• The router endpoint is CORS-open (access-control-allow-origin: *).
• nvidia/parakeet-tdt-0.6b-v3 transcribes via POST router.huggingface.co/together/v1/audio/transcriptions with response_format=verbose_json + timestamp_granularities[]=word.
• Response shape: { language, duration, text, words:[{ id, word, start, end }] } with start/end in seconds.
• The earlier concern from huggingface.js#2225 ("Model not supported by provider together") did not reproduce — appears to have been provider/billing-specific; the direct provider path works.

Implementation

• New js/hyperaudio-lite-editor-parakeet.js (parakeet-hf-service): a single synchronous multipart POST (like Deepgram, not AssemblyAI's poll). Parses the word list (seconds → data-m/data-d). No speaker labels (Parakeet doesn't diarize). Clear errors for invalid token (401/403), quota (402), unreadable media/model (400/422), inference down (5xx), and cross-origin media-fetch failures.
• 25-language dropdown + Auto-detect (omits the language field).
• Reuses the eye show/hide, remember-key opt-out and localStorage persistence from the AssemblyAI work. Cloud group is now AssemblyAI · Deepgram · Parakeet (HF) (alphabetical).
• Version markers → 0.8.2.

Notes

• Keys live in localStorage in plain text (same trust model as any bring-your-own key); covered by the per-key remember opt-out.
• URL-mode fetches the media client-side and forwards it as a Blob (the endpoint takes a file, not a URL), so a media host without CORS surfaces a clear "upload the file instead" error.