07c4454e

Harden upload pixel-limit check and drop IdentityPath

Use 64-bit math in NewProcessablePhoto's resolution check so a crafted
JPEG header can't overflow a 32-bit int past the limit, preserve the
underlying decode error instead of a bare sentinel, and replace the
redundant uploads.IdentityPath wrapper with the existing
mediastore.NewRelativeOutputPathFromFilename so both entry points match.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Agent Instructions

Each run corresponds to one flake attribute. Click a run for its logs and status.

Example: https://nix-ci.com/cb:mtlynch:little-moments/slice-1/07c4454e1905bcebe21527250b0812b26b91f96d/eed7d010-c538-4c3b-aa61-f9619f89006a

Wait for suite to complete:

curl --netrc -N https://nix-ci.com/cb:mtlynch:little-moments/slice-1/07c4454e1905bcebe21527250b0812b26b91f96d/wait

This page is also available in machine-friendly formats. Request one with the Accept header:

• curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:mtlynch:little-moments/slice-1/07c4454e1905bcebe21527250b0812b26b91f96d
• curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:mtlynch:little-moments/slice-1/07c4454e1905bcebe21527250b0812b26b91f96d

For more instructions, fetch https://nix-ci.com/instructions .