devops

This code scaffolds a token-protected preview worker and checks deliverable expiry. It has a moderate security risk: unescaped CLI-supplied client and slug values can cause stored XSS in the review page, and the expiry-check slug can traverse paths when reading metadata. Proxy mode also forwards request headers and query parameters, potentially exposing the review token to the upstream service; no clear malware behavior or suspicious external destination is present.