fix(security): authorize site uploads and harden tokens, media and request identity

src/app/admin/favicon/favicon-form.tsx

@@ -110,7 +110,7 @@ export function FaviconForm({ currentUrl }: { currentUrl: string | null }) {
 						<input
 							type="file"
 							name="file"
-							accept=".png,.jpg,.jpeg,.gif,.webp,.ico,.svg"
+							accept=".png,.jpg,.jpeg,.gif,.webp,.ico"
 							required
 							className="block w-full text-sm text-[var(--color-text-readable)] file:mr-3 file:py-2 file:px-4 file:rounded-lg file:border-0 file:text-sm file:font-semibold file:bg-[var(--admin-accent)] file:text-[var(--color-primary-foreground-readable)] cursor-pointer"
 						/>