Reader sources are VoiceOfML dataset files only; converted assets come from
buckets. A direct vomebook/Reader-Assets URL is now rejected locally (403)
instead of being forwarded to an upstream 401, and redirect or resolve-cache
targets into it are refused. Remove its redirect scope and its immutable
Cache-Control rule; keep the sidecar object-path grammar (READER_ASSET_PATH_RE).
