fix(security): authorize site uploads and harden tokens, media and request identity

src/actions/set-locale.ts

@@ -1,8 +1,10 @@
 "use server";
 
 import { cookies } from "next/headers";
+import { isSupportedLocale } from "@/i18n/locales";
 
 export async function setLocaleCookie(code: string): Promise<void> {
+	if (typeof code !== "string" || !isSupportedLocale(code)) return;
 	const store = await cookies();
 	store.set("NEXT_LOCALE", code, {
 		path: "/",