feat(hosted_file): add GET /{hosted_file_id}/links endpoint

Returns all hosted_file_link records for a file with link_to_id resolved
to random strings (ID Vision compliant). Used by admin file management to
assess what objects reference a file before deletion.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

documentation/GUIDE__AE_API_V3_for_Frontend.md

@@ -1,5 +1,7 @@
 # Aether API V3 Frontend Integration Guide (Svelte/TypeScript)
 
+**Last Updated:** 2026-06-12
+
 This guide defines the standards for interacting with the **Aether API V3 CRUD** and **Action** endpoints.
 
 ---
@@ -368,6 +370,20 @@ These helper endpoints let the frontend request small server-side transformation
     - Add `?background=true` to schedule the clip asynchronously — returns `202 Accepted` immediately; poll the `hosted_file` record for completion.
     - Returns 400 on synchronous failure; 202 when scheduled successfully.
 
+- **Get Links**
+  - Method: `GET`
+  - Path: `/v3/action/hosted_file/{hosted_file_id}/links`
+  - Auth: standard V3 headers
+  - Returns: array of `{ link_to_type, link_to_id, link_to_id_random }` for every record in `hosted_file_link`. Empty array if no links exist (file is an orphan).
+  - Use this to assess what objects are using a file before deleting it.
+
+- **Delete**
+  - Method: `DELETE`
+  - Path: `/v3/action/hosted_file/{hosted_file_id}`
+  - Query params: `link_to_type`, `link_to_id` (random string), `method` (`hide` | `disable` | `delete`, default `hide`), `rm_orphan` (bool, default `false`)
+  - Behavior: removes the specified link record, then if `rm_orphan=true` and no links remain, applies `method` to the file. Use `method=delete` to hard-delete the physical file and DB record. Without `link_to_type`/`link_to_id`, no link is removed; `rm_orphan` only fires if the file already has zero links.
+  - Use the `/links` endpoint first to get `link_to_id_random` — the delete endpoint resolves `link_to_id` as a random string, not an integer.
+
 Frontend guidance:
 
 - Call these routes with the same `link_to_type` / `link_to_id` you plan to associate the resulting hosted_file with — the server resolves random IDs for you.