Mask baked-in Supabase URLs on db-managed links

Details

Also rewrite anchors whose href already matches a DB public_url (legacy
CI HTML) and open documents via blob fetch when CORS allows.
Co-authored-by: Cursor <cursoragent@cursor.com>

Files changed (1)