Viewed-image previews signed one URL per thread and path, so a later Read
of an overwritten image reused the earlier signing and showed stale bytes.
Each Read now carries its item id as a client-only signing key that splits
the asset URL cache and is stripped before the RPC.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>