Private gallery manager. Originals stay in R2; the browser also builds WebP thumbnail and display variants.