GET/api/assetsAll assets + platform defaults + placeholder URLs
GET/api/search?q=Search assets by filename, category, meta
GET/api/statsPlatform health — Discord, event count, top category
POST/api/uploadUpload image → Blob + KV + Discord (requires token)
POST/api/authLogin → sets upload_token cookie (7 day session)
GET/api/placeholders?type=profile | banner | thumbnail — SVG fallback images