• Cloudinary signature endpoint
  • GET /api/uploads/cloudinary-signature for signed uploads; client forms use NEXT_PUBLIC_* vars or unsigned preset

Next Image remote allowlist for Cloudinary in next.config.ts