Blog index — lists all published posts, newest first.

Pulls from content/blog/*.md via the in-process cache in app.blog. No rate-limit counting, and crucially no new fingerprint cookie write — bots hit these endpoints constantly and cookie-setting on every crawl is noise that confuses anti-abuse heuristics. We still resolve the user (read-only) so the nav bar shows correct Sign-in / Pro / etc. state for actual humans browsing.