Fix file preview URLs by routing through backend download endpoint

clean project (no secrets)