- migration 014_card_files: tabla con soft-delete + index activo - handlers POST/GET/DELETE en backend/files.go - routes /api/cards/{id}/files, /api/files/{id} - limite 10MB, storage en uploads/<card_id>/<random>__<safe>
