feat(storage): complete phase 3 branding foundation

app/api/branding/assets/[id]/route.ts

@@ -0,0 +1,15 @@
+import { apiError } from "@/server/api/responses";
+import { getFileService } from "@/server/files/runtime";
+import { fileResponse } from "@/server/files/http";
+
+export async function GET(
+  _request: Request,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  try {
+    const file = getFileService().readPublicBranding((await params).id);
+    return fileResponse(file.metadata, file.bytes, "public, max-age=3600, stale-while-revalidate=86400");
+  } catch (error) {
+    return apiError(error);
+  }
+}

app/api/branding/route.ts

@@ -0,0 +1,24 @@
+import { apiError, apiSuccess } from "@/server/api/responses";
+import { domainActorFromSession } from "@/server/auth/domain-actor";
+import { getSessionContextFromHeaders } from "@/server/auth/session";
+import { getBrandingService, getPublicBranding } from "@/server/branding/runtime";
+import { DomainError } from "@/server/domain/errors";
+
+export function GET() {
+  return apiSuccess(getPublicBranding());
+}
+
+export async function PATCH(request: Request) {
+  const context = await getSessionContextFromHeaders(new Headers(request.headers));
+  if (!context) return apiError(new DomainError("UNAUTHENTICATED", "Oturum gerekli."));
+
+  try {
+    const branding = getBrandingService().update(
+      domainActorFromSession(context),
+      await request.json(),
+    );
+    return apiSuccess(branding);
+  } catch (error) {
+    return apiError(error);
+  }
+}