Add the picked providers and a Must include group

CURRENT.md

@@ -40,6 +40,16 @@ mobile draft at 390px.
   - [x] C11 preview caching: Discord-hosted image/GIF previews (WebP 320px, hash-addressed, 5 MiB
     cap, one attempt) run after every walk in both modes. Live run `...-20260916090722`:
     `previewed: 2`; thumbs served over `/api/media/<scrape>/<item>/thumb` (200).
+  - [x] C48 Expanded providers and the Must include mirror. The list grew to 19 entries from the
+    user's picks: reddit, twitter, tiktok, instagram, streamable, facebook, gyazo, a merged
+    `giphy,tenor` (one checkbox, two substrings), 2ch.hk (stand-in for 4chan; the CDN hosts stay
+    behind the default URL exclusion), funnyjunk, and internet archive. The drawer gained a
+    **Must include** block mirroring **Do not include**: provider/source-kind checkboxes
+    (`includeProviders`, `includeSources`), file-type chips, and the size/length bounds (moved here
+    since they are inclusions, not exclusions). Store, `/api/media`, `/api/media/stats`, and MCP
+    all carry the two include params. Live-verified: `includeProviders=youtube` returns only
+    YouTube rows, `giphy,tenor` includes/excludes the same rows complementarily; smoke checks both
+    groups against the API list (22 = 19 + 3 kinds).
   - [x] C47 Provider list from the dataset. Aggregated the `provider` column over all 11 scraper
     databases (distinct URLs): discord 13631 (folding cdn.discordapp.com and media.discordapp.net),
     youtube 4840, tenor 352, twitch 196, twitter 111, steam 83, medal 59, sketchfab 31, gfycat 30,