The Laravel proxy is an explicit route allow-list and never included the core
`disk/doctor` route or the `trash`, `trash/restore|list|purge|empty` family, so
Bucket Doctor and soft-delete 404'd for Laravel users in proxy mode (core has
had these since ≤0.2.5 / the trash feature). Added the 6 routes + controller
handlers mirroring core (same perms/validation; BYOB disks registered before the
Doctor probes). All call core APIs present at the declared 0.2.8 floor.

Guard so the proxy can't silently fall behind core again: the Laravel smoke now
diffs core's /api/fm route surface against routes/fluxfiles.php (fails on any
un-proxied core route — would have caught this) and checks every proxied route
maps to a real controller method.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>