Process Files Mutate

create / save / delete / rename / move / copy — JSON in, JSON out.

Allow-listed rather than forwarded blindly: action lands in a core URL path, and an open passthrough would let any caller address routes this shim was never meant to expose.