[1.68.0] - 2026-07-10 — Ain
Theme: blob route extensibility — two generic, unbound-by-default seams over the blob
endpoints plus a reusable auth:optional mode, and a fix that makes signed URLs actually
usable under globally-private uploads. No new env vars, no migrations; the VIEW route's auth
posture changes (see Fixed — the controller remains the authoritative gate, so response
shapes are unchanged).