feat(v3-auth): modernize hosted file access with simplified bypass pattern

- Roll out platform-wide standard for unauthenticated binary access using '?key=[account_id]' query parameter.
- Update API helpers (get, post, patch) to recognize 'key' bypass and strip account context headers accordingly.
- Refactor IDAA Bulletin Board to restore inline image rendering and edit-mode previews.
- Modernize Events Launcher (Layout, Sync, Session View) to use V3 Action URLs with verified auth.
- Update HTML generators in 'ae_utils.ts' to support the new authenticated URL structure.
- Harden 'ae_comp__event_file_obj_tbl' CSV export and clipboard links with V3 standard patterns.

src/lib/ae_api/api_patch_object.ts

@@ -59,6 +59,7 @@ export const patch_object = async function patch_object({
     const bypass_val = merged_headers['x-no-account-id'] || merged_headers['x_no_account_id'];
     const is_valid_bypass = bypass_val === 'bypass' || 
                            bypass_val === 'Nothing to See Here' || 
+                           params['key'] ||
                            bypass_val === 'direct-download';
 
     if (is_valid_bypass) {