{"service":"qr-public","role":"isolated edge: signed media + dynamic redirect"}