feat: storage listing/management via REST API

## Problem

Files uploaded to Run402 storage have no web UI to browse, manage, or delete. Only `run402 storage list/delete` via CLI.

## Suggested Solution

Expose storage management via the REST API with auth (list, delete, get metadata). This would enable in-app file browsers and admin UIs.