Task: Publish Prompt Museum media fix on main

Identity

Publish the completed Prompt Museum media-rendering change from integration commit 22bee1d onto the occupied main worktree, preserving the source code/tests and accepted canonical documentation updates.
Keep the source feature task record out of the canonical tree; integration records remain task-scoped and the source worktree remains read-only.

Preserve the Main-owned fixed relative media route, Works Bearer refresh behavior, 10 MiB/trusted-raster limits, Renderer data-URL validation, direct HTTPS images, and local failure placeholders.
The merge must not claim production Works/CDN, real-account, signed-package, or deployment acceptance; it must leave main clean and the integration lock releasable.

Merged integration commit 22bee1d into main as commit 590ae13 with an explicit non-fast-forward merge; the final tree contains the Prompt Museum Main proxy, shared DTO, Renderer media conversion/page behavior, focused tests, and canonical state/evidence/commitment updates.
Removed only the intermediate integration task record from the merge result; this final task record is the canonical integration note.

git merge --no-ff --no-commit 22bee1d: PASS; automatic merge had no conflicts.
Main rerun: corepack pnpm exec vitest run for the 3 Prompt Museum files — 27/27 PASS; corepack pnpm run typecheck — PASS; scoped ESLint over the eight owned source/test files — PASS.
Source/integration verification reviewed as read-only: Vite build, targeted Electron E2E 1/1, git diff --check, and final Sol review PASS.
check_doc_drift.py --task-id 20260818-museum-media-main-8c2d — PASS; final git status --porcelain — clean.

Real Works account, deployed media endpoint/CDN, and signed-package smoke remain release follow-ups.

current-state.md, 50-evidence/evidence-index.md, and 80-commitments/commitments.md now record the bounded Main proxy and the remaining production acceptance obligation.