serve project files by token hash, preview images inline and download other files

db/init.sql

@@ -48,6 +48,7 @@ ON CONFLICT (name) DO NOTHING;
 CREATE TABLE IF NOT EXISTS project_files (
   id SERIAL PRIMARY KEY,
   entry_id INT NOT NULL REFERENCES entries(id) ON DELETE CASCADE,
+  token VARCHAR(64) UNIQUE NOT NULL,
   path VARCHAR(255) NOT NULL,
   name VARCHAR(255) NOT NULL,
   created_at TIMESTAMPTZ DEFAULT now()