feat: implement flexible user authentication, harden product moderation logic, and improve S3 presigned URL generation with host substitution.#31