Redirect a short link code to its original URL

Resolves an openhm.xyz/r/{code} short link to the long URL stored locally and 302s to it. Authentication is required: the route uses the standard backend JWT, and the redirect only succeeds when the authenticated user matches the link's createdBy. Anyone else gets a 404 (no leak of link existence). Links self-expire after 7 days.