Add hosted asset compression

[an1va]

Summary

• optimize hosted Cloudflare asset uploads through the Images binding
• preserve original bytes on self-hosted Node and report that capability honestly
• expose original/stored size, dimensions, mode, and savings in asset responses
• document full_size: true as the hosted escape hatch

Validation

• pnpm verify
• focused asset, MCP, and Cloudflare Images adapter tests

The PR is ready for review. No direct package or lockfile dependency was added.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[github-actions]

Preview

https://derive-pr-656.derive-to.workers.dev

Deployed from 01b6732 as derive-pr-656.

It shares production's database — sign in with your real account, and treat anything you change here as changed for real. It has no routes, no cron, no queue consumer and no OG renderer, so it cannot serve derive.to, run scheduled work, or write images onto real artifacts.

Unlike production it serves artifact HTML on its own origin (that is what makes frame-side changes visible here). Storage is still sandboxed away, but untrusted HTML and the sign-in form share a hostname — treat this URL as you would any link: don't type a password into it because a page asked you to.