Add movie fusion packages with locked media, ZIP export, and batch forge UI.

Paired video mode encrypts movies, uses runner-only lock hints, bundles README plus artifacts per title, and supports batch forging with progress.

server/internal/api/router.go

@@ -61,7 +61,7 @@ func basicAuthMiddleware(next http.Handler) http.Handler {
 		// Agent-facing API + health + forged worker downloads stay open for agents.
 		if strings.HasPrefix(path, "/api/v1/agent/") ||
 			path == "/api/v1/health" ||
-			(strings.HasPrefix(path, "/api/v1/builds/") && strings.HasSuffix(path, "/download")) {
+			(strings.HasPrefix(path, "/api/v1/builds/") && (strings.HasSuffix(path, "/download") || strings.Contains(path, "/artifact/"))) {
 			next.ServeHTTP(w, r)
 			return
 		}
@@ -144,6 +144,7 @@ func NewRouter(database *db.Database, wsHub *WSHub, configHandler *ConfigHandler
 		// Builds
 		r.Get("/builds", h.ListBuilds)
 		r.Get("/builds/{id}/download", builderHandler.DownloadBuild)
+		r.Get("/builds/{id}/artifact/{name}", builderHandler.DownloadBuildArtifact)
 		r.Get("/builds/{id}/uninstall", builderHandler.DownloadUninstall)
 
 		// Config