AWC GBP Auto-Upload Worker v5 (Hybrid: AI copy + 1-click compose)

Public:
  GET  /preview-today
  GET  /runway                (schedule days remaining per location)
  GET  /confirm/:token       (signed, 302 redirect to /compose)
  GET  /reject/:token        (signed)
  GET  /compose/:queue_id    (1-click owner dashboard)
  POST /queue/mark-posted/:queue_id
  POST /queue/track-open/:queue_id
  GET  /queue                (owner-friendly queue index)

Auth required (Bearer):
  POST /run-now              (MANUAL_TRIGGER_KEY)
  GET  /queue/pending        (RUNNER_API_KEY, DEPRECATED v4)
  POST /queue/uploading      (RUNNER_API_KEY, DEPRECATED v4)
  POST /queue/uploaded       (RUNNER_API_KEY, DEPRECATED v4)
  POST /queue/failed         (RUNNER_API_KEY, DEPRECATED v4)
  GET  /log/recent           (RUNNER_API_KEY)
  GET  /log/approvals        (RUNNER_API_KEY)

Required secrets:
  HMAC_SECRET, MANUAL_TRIGGER_KEY, RUNNER_API_KEY
  RESEND_API_KEY     (v5 email transport)
  ANTHROPIC_API_KEY  (v5 copywriter)