deploy: reader-access security hardening (feature/audiobook@06a5ed8)

deploy: audiobook subsystem + encode int16 fix + R2 page fast-path + costs breakdown + query-run flow