feat(storage): first-class data - no silent failures in the persistence pipeline

feat(storage): private dataset by default + /d/* reverse proxy

feat(auth): sign-out button in the editor topbar

feat(backend): rate-limit /api/upload to prevent anonymous abuse

refactor(backend): modular server split with new routes, persistence and agent layer