✅ File host is alive

This is the PR 2a stub. Authentication and real file serving land in PR 2b.

• requested path: /
• bucket "tenzo-files-prod" reachable — 0 object(s)
• served via CloudFront → WAF → Lambda (streaming)