800cea0826
Org-shared and agent-visible knowledge bases store images under the owner tenant's storage path, which the tenant-scoped /files route rejects for borrowing tenants. Add GET /api/v1/knowledge-bases/:id/files gated by RequireKBAccess and route frontend image hydration through it when kbId is known.