Input validation and logs that don't leak

Zod validation at a Next.js API boundary that logs the failing field's path, never its value, a magic-byte MIME sniff for uploads, and a log-string sanitizer.