[DevMatei]

Summary

• fixed a path traversal in /template-assets/ that could read files outside the assets folder
• redid the ui on every page: no navbar, nunito everywhere, plain article layout for the seo pages, slimmer footer
• home: sample poster before you generate, inline errors, native period picker that only lists finished months, about section
• templates page: search, sort tabs, lighter cards
• editor: undo, draft autosave, keyboard friendly layer list, toasts
• restyled the review desk and 404 page
• small "grab an ad spot" line under ads
• fixed template previews 404ing for slugs with underscores (black_new, white_new)
• multi server support: counters move to sqlite with per node tallies that sync between boxes (old count and template uses get imported once), uploaded artwork lives on disk and gets fetched from peers, badges sync, approved templates replicate from the primary and submissions/reviews forward to it
• uploaded artwork now works across gunicorn workers (it was in memory per worker before)
• new GET /metrics/stats with per day and per service counts

Verification

• pytest wrapped_fm/tests: 43 passed, 54 subtests
• ran two nodes locally (3 workers each), checked counter sync, artwork and badge fetch across nodes, template replication and forwarding, and the replica with the primary down

[github-actions]

PR preview image is ready for testing: ghcr.io/devmatei/make-a-wrapped:pr-30

docker pull ghcr.io/devmatei/make-a-wrapped:pr-30
docker run --rm -p 8000:8000 --env-file .env ghcr.io/devmatei/make-a-wrapped:pr-30

then open http://localhost:8000