fix: CMS image proxy + partial unique index for soft-deleted releases

DeepDrftManager/Program.cs

@@ -61,6 +61,11 @@ builder.Services.Configure<ForwardedHeadersOptions>(options =>
     options.KnownProxies.Clear();
 });
 
+// MVC controllers — required for the ImageProxyController that forwards browser image requests
+// to DeepDrftAPI so rendered URLs resolve against the Manager's own origin, not the internal
+// API address.
+builder.Services.AddControllers();
+
 // InteractiveServer only — no WASM render mode on the CMS host.
 builder.Services.AddRazorComponents()
     .AddInteractiveServerComponents();
@@ -98,6 +103,7 @@ app.UseAntiforgery();
 app.UseAuthorization();
 
 app.MapStaticAssets();
+app.MapControllers();
 
 // The AuthBlocks API surface (/api/auth/*, /api/users/*, etc.) now lives on DeepDrftAPI; this host
 // only renders the AuthBlocksWeb Razor pages (/account/login, /account/logout), which call that API.