DEV STACK — unauthenticated. Bound to yuu-content-dev and
yuu-media-dev. Cloudflare Access is not configured (account-level
step). Never point this at production.
Yuu content admin
Writes go to the same D1 and R2 the app-facing API reads, so every change here is
verifiable through /api/getCategories and friends. Uploaded media gets
a content-hashed key: media is served immutable for a
year, so reusing a key would strand stale bytes on every installed device.