Files and uploads

Uploads and downloads that are not JSON.

Pilotv1

Everything is JSON except these. No endpoint accepts a URL to fetch, and gift card PINs and wallet links never appear in lists or logs.

Operation	Type	Rules
`POST /wallet/media`	Multipart upload, one image	2 MB, image types only. Served for passes without sign-in.
`POST /shop-links/menu/photos` and per branch	Multipart upload	2 MB, the menu's image rules.
`GET .../wallet-pass/apple`	`application/vnd.apple.pkpass`	Needs the wallet set up (`409 WALLET_NOT_CONFIGURED` otherwise). Never with a test key.
`GET .../wallet-pass/google`	A save link in JSON	A short-lived credential: never stored, never logged.
`GET /customer-exports/{exportId}/download`	`text/csv`	Masked phones. Lives 24 hours; wiped early when a listed customer is erased.
`GET /displays/{displayId}/download`	`image/png` or `application/pdf`	Lives 24 hours (`410 DISPLAY_EXPIRED` after).
`GET /business/qr`, `GET /branches/{id}/qr`	`image/png`	The join QR.