Static artifact sharing should copy content behind one tokenized tunnel
General lesson: when an agent workspace needs public static previews, use one plugin-level loopback listener and one tunnel, then route explicit published copies by unguessable share tokens. Organize those copies by thread/project metadata in the UI, but never expose arbitrary wo…