12effe17d3
- GET /api/dashboard/user-downloads: deprecated, use SSE - GET /api/dashboard/cover-art: image proxy for CSP compliance - GET /api/dashboard/stream: SSE real-time updates, no CSRF needed - POST /api/dashboard/blocklist-search: admin-only, removes + re-searches - Document SSE event format and heartbeat - Include admin-only constraints and error responses