07c4454e

By: Michael Lynch <git@mtlynch.io>

Harden upload pixel-limit check and drop IdentityPath

Use 64-bit math in NewProcessablePhoto's resolution check so a crafted
JPEG header can't overflow a 32-bit int past the limit, preserve the
underlying decode error instead of a bare sentinel, and replace the
redundant uploads.IdentityPath wrapper with the existing
mediastore.NewRelativeOutputPathFromFilename so both entry points match.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Codeberg

Suite timing

Time to Start Worker time Duration Time to finish
Config 1s 1m13s 19m58s 20m00s
Eval - - - -
Build - - - -
Test - - - -
Deploy - - - -
Suite 1s 1m13s 19m58s 20m00s