cmc Closes #16. git-lfs-authenticate in the SSH dispatcher; stateless repo+op tokens; batch and basic transfers over HTTP with anonymous public downloads; content-addressed BlobStore with local backend, S3 drop-in later.