[Internal] Private artifact hosting for Claude artifacts — Cloudflare Pages + Access

## **⚠️ Problem:**
Claude individual plans have no private sharing — sharing an artifact publishes a public URL, crawlable by any AI. Team analyses (LMT2, roadmaps, competitive teardowns) can't be circulated internally without exposing them, so they stay locked in personal sessions.

## **🏁 Scope:**
Cloudflare Worker upload endpoint + Pages site behind Cloudflare Access, gated to `@decentraland.org` + `@dclregenesislabs.xyz`. Upload from Claude, get a private URL back. Out: public sharing, external-org guests (Foundation) — see Notes.

## **📝 Deliverables:**
- [ ] Cloudflare Pages project + custom domain on `dclregenesislabs.xyz`
- [ ] Cloudflare Access policy — allow `@decentraland.org`, `@dclregenesislabs.xyz`
- [ ] Worker `POST /upload` — token auth, stores HTML, returns permanent URL
- [ ] R2 (or KV) storage bucket + retention/expiry rule
- [ ] Index page — artifact list, author, date, search
- [ ] Claude skill `share-artifact` — uploads current artifact, returns link
- [ ] Runbook — upload, grant access, revoke, delete

## **📌 Notes:**
- Gon: Claude Team plan hits the same wall for external orgs (Foundation). Per-artifact guest email allowlist needed at v1, or defer?
- Name collision: [`dcl-regenesislabs/rgl-artifacts-viewer`](https://github.com/dcl-regenesislabs/rgl-artifacts-viewer) already exists for CI build artifacts. Pick a distinct name/domain.
- Repo target: thread agreed on a new repo in `dcl-regenesislabs`. Not created yet — issue parked here for tracking.
- Mateo: Worker approach ships immediately; repo + CI approach costs ~30s per upload.

## **🔗 References:**
- [dcl-regenesislabs/rgl-artifacts-viewer](https://github.com/dcl-regenesislabs/rgl-artifacts-viewer) — existing Next.js/Vercel viewer for GitHub Actions artifacts. Different subject, but the same "internal viewer behind auth" shape; naming collision to avoid.
- No prior art in `dcl-regenesislabs` or `decentraland` issues (searched `cloudflare access artifact`, 2026-09-02).

**Requested by Rod via Slack**