Read one editable markdown file and return its content.

Returns {"filename": ..., "content": ...} with an empty string when the file does not yet exist. 403 if the filename is not in the allow-list. In demo mode, returns realistic fake content keyed by project name.