Unify extension viewing and inline editing

.dev.vars.example

@@ -3,7 +3,7 @@ AUTH_CLIENT_SECRET="replace-with-oauth-client-secret-from-auth.fossbilling.net"
 SESSION_SECRET="replace-with-openssl-rand-base64-32"
 # Must match the api repo's ASSERTION_SIGNING_SECRET exactly (same shared secret).
 ASSERTION_SIGNING_SECRET="replace-with-openssl-rand-base64-32"
-# Shared secret for POST /api/revalidate (purges CDN-cached catalogue pages).
+# Shared secret for POST /api/revalidate (purges CDN-cached extension pages).
 # The api worker (or other writers) sends it as: Authorization: Bearer <secret>.
 EXTENSIONS_REVALIDATE_SECRET="replace-with-openssl-rand-base64-32"
 # Local development uses ordinary HTTP unless you run both Workers with a

astro.config.ts

@@ -29,7 +29,6 @@ export default defineConfig({
     // served by URL without cookies, so the first visitor's variant would
     // leak to everyone.
     '/': { maxAge: 120, swr: 60, tags: [EXTENSIONS_CACHE_TAG] },
-    '/extension/[id]': { maxAge: 300, swr: 120, tags: [EXTENSIONS_CACHE_TAG] },
     '/404': { maxAge: 60 },
   },
   // Prefetch is disabled entirely: Cloudflare's edge refuses