refactor: land architecture cleanup stack through arc-16

[matthewpeterkort]

This consolidates the already-reviewed architecture cleanup and follow-up fixes from PRs #117 through #129 onto the current development branch.

The committed tree exactly matches the original refactor/arc-16 tip (9cba6e4efb95cf080e35d0ce673bf79cb5f49892). Dependabot PRs #94, #95, and #112 remain separate.

Validation:

• Confirmed the current development tree matches the original refactor: separate authentication mechanisms from Fiber (WP03) #116 head used as this stack's parent.
• Applied only the cumulative diff from refactor: introduce object records and HTTP codecs (WP04) #117 through refactor: finish architecture cleanup and organize the repository #129.
• Confirmed the resulting tree hash matches the original refactor/arc-16 tip.
• git diff --check passes.
• The component PRs passed their GitHub CI and independent exact-head review.

[netlify]

✅ Deploy Preview for drs-server ready!

Name	Link
🔨 Latest commit	813a3a2
🔍 Latest deploy log	https://app.netlify.com/projects/drs-server/deploys/6a9e3c7433b8c500088baf02
😎 Deploy Preview	https://deploy-preview-132--drs-server.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[codecov]

Codecov Report

❌ Patch coverage is 68.18727% with 265 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
cmd/server/server.go	49.13%	85 Missing and 3 partials ⚠️
cmd/server/scope_repair.go	12.16%	65 Missing ⚠️
internal/access/authentication/jwks.go	83.11%	6 Missing and 7 partials ⚠️
internal/access/resources.go	0.00%	11 Missing ⚠️
internal/buckets/scope_cache.go	77.27%	5 Missing and 5 partials ⚠️
internal/buckets/scopes.go	82.75%	8 Missing and 2 partials ⚠️
client/client.go	66.66%	2 Missing and 7 partials ⚠️
internal/buckets/policy.go	71.42%	4 Missing and 4 partials ⚠️
cmd/upload/main.go	33.33%	6 Missing ⚠️
internal/buckets/identity.go	80.64%	4 Missing and 2 partials ⚠️
... and 15 more

📢 Thoughts on this report? Let us know!

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-07T04:32:44.903554Z	04dd0ca	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.