Ticket 2 — Fiscal/private mode on private disk beside public CMS

[jbagsik]

Ticket 2 — Fiscal/private mode on private disk beside public CMS

What to build

Operators can store and browse fiscal/private media on a private disk while CMS media stays on the public disk and MediaPicker behaviour for the website is unchanged. Private items are searchable in the Filament media admin and are not served via the public storage symlink. Access uses an authorized/temporary path, not a permanent public URL.

Acceptance criteria

• Default CMS uploads remain on the public media disk.
• Fiscal/private mode (name TBD) stores on a private disk; files are not publicly symlink-reachable.
• Admins can list/search fiscal/private media in Filament.
• Opening/downloading private media respects Ticket 1 show/download rules via authorized access.
• No host/customer-specific naming in the package.
• Tests: public CMS item still creatable on public disk; fiscal/private item lands on private disk and is admin-reachable only through authorized access.