Download a paid file (public, entitlement-gated)

Streams a file the app owner uploaded as paid content. The bytes are private until this endpoint authorises them, which is what makes the paywall real , a static bundle can never hold a file back on its own. Always served as an attachment. The entitlement is re-checked per request, so a refund closes access on the next click.