feat(storage): first-class data - no silent failures in the persistence pipeline

feat(storage): private dataset by default + /d/* reverse proxy

feat(backend): rate-limit /api/upload to prevent anonymous abuse

test: add vitest test suite for publisher, auth, security, utils