bc336a9744
Changes: - Update attachment download link in UI to use shareId - Add shareId validation to attachment download route - Validate TTL before allowing attachment downloads - Extract locationId from shareId using extractShareId helper Security: - Attachment downloads now validate checksum and TTL - Prevents unauthorized access to bill attachment files - Returns 404 for invalid/expired share links 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>