[Linuxuser67]

Live resolution moves to the binary while capture stays on ffmpeg (signal ownership):

• resolve_hls_input tries yt-dlp --dump-single-json on the master first: variant choice, audio groups, tokenized URLs and keys stay maintained upstream, with full cookie/header context. The hand-rolled master-text parse remains as fallback (demoted, not deleted).
• The dump's raw http_headers supply the page Referer, threaded through HlsInput into ffmpeg -headers (CR/LF-rejected like the existing header guard) — closes the hotlink gap on the live path.
• run_hls_ffmpeg takes the binary path for resolution; capture loop, stop-and-keep and progress untouched.

Tests: dump picking (height + audio + Referer), Referer precedence/format-level/video-level/CR:LF-rejection, fake-binary resolve integration, header emission. 216 passing, clippy clean.