音乐

浏览器 ──POST /api/music/upload-url──> Worker（SigV4 签名）
浏览器 ──PUT（预签名 URL）──────────> R2（文件不经过 Worker）
浏览器 ──POST /api/music（注册元数据）─> D1 music 表

GET /api/music

{
  "ok": true,
  "music": [
    {
      "id": "曲目ID",
      "title": "起风了",
      "artist": "买辣椒也用券",
      "url": "https://music.example.com/music/xxx.mp3",
      "size": 13107200,
      "duration": 0,
      "sort": 0
    }
  ]
}

POST /api/music/upload-url
Authorization: Bearer <token>

{
  "name": "起风了-买辣椒也用券.mp3",
  "size": 13107200
}

{
  "ok": true,
  "uploadUrl": "https://<R2端点>/music/xxx.mp3?X-Amz-Algorithm=...&X-Amz-Signature=...",
  "publicUrl": "https://music.example.com/music/xxx.mp3",
  "contentType": "audio/mpeg",
  "expiresIn": 3600
}

POST /api/music
Authorization: Bearer <token>

{
  "id": "xxx",
  "title": "起风了",
  "artist": "买辣椒也用券",
  "url": "https://music.example.com/music/xxx.mp3",
  "size": 13107200,
  "contentType": "audio/mpeg"
}

DELETE /api/music/:id
Authorization: Bearer <token>

CREATE TABLE music (
  id         TEXT PRIMARY KEY,
  title      TEXT NOT NULL,
  artist     TEXT DEFAULT '',
  url        TEXT NOT NULL,       -- R2 公开地址（R2_PUBLIC_BASE + /music/<key>）
  cover      TEXT DEFAULT '',
  size       INTEGER DEFAULT 0,   -- 字节
  duration   INTEGER DEFAULT 0,   -- 秒
  sort       INTEGER DEFAULT 0,   -- 排序
  created_at TEXT DEFAULT ''
);