Fetch stored file bytes

Public and unauthenticated — knowing the content hash is the authorization, which is why hashes are not enumerable and error responses never distinguish "absent" from "not yours". Immutable and cacheable for a year; supports If-None-Match. Only common raster image types are served inline; everything else, SVG included, is attachment.