perf: Phase 4+5 optimizations — uploads 10x, downloads 2x, concurrent 2x. moka cache, 512KB buffers, remove sync_all, hash-on-write, preloaded queries, bench.sh v3, gitignore storage/. 500MB upload 12.6s->1.3s (392MB/s). RSS 69-113MB, 0 swap.

static/js/recent.js

@@ -246,7 +246,7 @@ const recent = {
             <div class="file-icon ${iconSpecialClass}">
                 <i class="${iconClass}"></i>
             </div>
-            <div class="file-name">${file.name}</div>
+            <div class="file-name">${escapeHtml(file.name)}</div>
             <div class="file-info">Accessed ${formattedDate.split(' ')[0]}</div>
         `;
 
@@ -297,9 +297,9 @@ const recent = {
                 <div class="file-icon ${iconSpecialClass}">
                     <i class="${iconClass}"></i>
                 </div>
-                <span>${file.name}</span>
+                <span>${escapeHtml(file.name)}</span>
             </div>
-            <div class="type-cell">${typeLabel}</div>
+            <div class="type-cell">${escapeHtml(typeLabel)}</div>
             <div class="size-cell">${fileSize}</div>
             <div class="date-cell">${formattedDate}</div>
         `;