ABAC enforcement, resource tags, and tag-based sharing

[blinkerbit]

This PR merges the \�bac\ branch into \main.

Highlights

• Attribute-based access control wired through handlers (PEP) with policy seeds and admin UX improvements.
• Resource tags (glob patterns) for files and directories, including **\ pattern support and directory-scoped patterns (e.g. \docs/**).
• Tag-based shares, /tagged/\ browse, profile shared-with-me, and tag chips on the file browser.
• Local static assets and CSP-friendly setup; removal of client-side Markdown/PDF preview in favor of plain text view and download elsewhere.

Note: Additional local edits may exist that are not yet committed or pushed.

Made with Cursor

[sonarqubecloud]

Quality Gate failed

Failed conditions
D Reliability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE