feat(media): implement Media Upload Service with CRUD APIs

- Add MediaFile entity, EF config, repository, upload options
- Add UploadMedia, UpdateMediaMetadata, DeleteMedia, GetMediaById commands/queries
- Add MediaFileBriefDto for consistent POST/PUT/DELETE response shape
- Add Internal (port 5002) and External (port 5001) REST endpoints
- Add MEDIA_UPLOADED/UPDATED/DELETED localized success messages (AR/EN)
- Add ERR110-ERR113 error codes for file validation
- Create and apply EF migration AddMediaService
- Build 0 errors, 773 tests pass (4 pre-existing failures)

Author: rashed99mm

backend/src/CCE.Api.Common/Localization/Resources.yaml

@@ -374,6 +374,36 @@ POLICY_SECTION_NOT_FOUND:
   ar: "لم يتم العثور على القسم"
   en: "Policy section not found"
 
+# ─── Media ───
+
+MEDIA_FILE_NOT_FOUND:
+  ar: "لم يتم العثور على الملف"
+  en: "Media file not found"
+
+INVALID_FILE_TYPE:
+  ar: "نوع الملف غير مسموح به"
+  en: "File type is not allowed"
+
+FILE_TOO_LARGE:
+  ar: "حجم الملف يتجاوز الحد المسموح به"
+  en: "File size exceeds the maximum allowed"
+
+EMPTY_FILE:
+  ar: "الملف فارغ"
+  en: "File is empty"
+
+MEDIA_UPLOADED:
+  ar: "تم رفع الملف بنجاح"
+  en: "File uploaded successfully"
+
+MEDIA_UPDATED:
+  ar: "تم تحديث الملف بنجاح"
+  en: "File updated successfully"
+
+MEDIA_DELETED:
+  ar: "تم حذف الملف بنجاح"
+  en: "File deleted successfully"
+
 SETTINGS_UPDATED:
   ar: "تمت عملية التحديث بنجاح"
   en: "Content update success"

backend/src/CCE.Api.External/Endpoints/MediaPublicEndpoints.cs

@@ -0,0 +1,97 @@
+using CCE.Api.Common.Extensions;
+using CCE.Application.Content;
+using CCE.Application.Media.Commands.DeleteMedia;
+using CCE.Application.Media.Commands.UploadMedia;
+using CCE.Application.Media.Commands.UpdateMediaMetadata;
+using CCE.Application.Media.Queries.GetMediaById;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Routing;
+
+namespace CCE.Api.External.Endpoints;
+
+public static class MediaPublicEndpoints
+{
+    public static IEndpointRouteBuilder MapMediaPublicEndpoints(this IEndpointRouteBuilder app)
+    {
+        var media = app.MapGroup("/api/media").WithTags("Media");
+
+        media.MapPost("", async (
+            IFormFile file,
+            [FromForm] string? titleAr,
+            [FromForm] string? titleEn,
+            [FromForm] string? descriptionAr,
+            [FromForm] string? descriptionEn,
+            [FromForm] string? altTextAr,
+            [FromForm] string? altTextEn,
+            IMediator mediator,
+            CancellationToken ct) =>
+        {
+            await using var stream = file.OpenReadStream();
+            var cmd = new UploadMediaCommand(
+                stream, file.FileName, file.ContentType, file.Length,
+                titleAr, titleEn, descriptionAr, descriptionEn, altTextAr, altTextEn);
+            var result = await mediator.Send(cmd, ct).ConfigureAwait(false);
+            return result.ToCreatedHttpResult();
+        })
+        .RequireAuthorization()
+        .DisableAntiforgery()
+        .WithName("UploadMediaExternal");
+
+        media.MapGet("{id:guid}", async (
+            System.Guid id,
+            IMediator mediator,
+            CancellationToken ct) =>
+        {
+            var result = await mediator.Send(new GetMediaByIdQuery(id), ct).ConfigureAwait(false);
+            return result.ToHttpResult();
+        })
+        .RequireAuthorization()
+        .WithName("GetMediaExternal");
+
+        media.MapPut("{id:guid}", async (
+            System.Guid id,
+            UpdateMediaMetadataCommand body,
+            IMediator mediator,
+            CancellationToken ct) =>
+        {
+            var cmd = body with { Id = id };
+            var result = await mediator.Send(cmd, ct).ConfigureAwait(false);
+            return result.ToHttpResult();
+        })
+        .RequireAuthorization()
+        .WithName("UpdateMediaMetadataExternal");
+
+        media.MapGet("{id:guid}/download", async (
+            System.Guid id,
+            IMediator mediator,
+            HttpContext httpContext,
+            CancellationToken ct) =>
+        {
+            var meta = await mediator.Send(new GetMediaByIdQuery(id), ct).ConfigureAwait(false);
+            if (!meta.Success || meta.Data is null)
+                return Results.NotFound();
+
+            var fileStorage = httpContext.RequestServices.GetRequiredKeyedService<IFileStorage>("media");
+            var stream = await fileStorage.OpenReadAsync(meta.Data.StorageKey, ct).ConfigureAwait(false);
+            return Results.File(stream, meta.Data.MimeType, meta.Data.OriginalFileName);
+        })
+        .RequireAuthorization()
+        .WithName("DownloadMediaExternal");
+
+        media.MapDelete("{id:guid}", async (
+            System.Guid id,
+            IMediator mediator,
+            CancellationToken ct) =>
+        {
+            var result = await mediator.Send(new DeleteMediaCommand(id), ct).ConfigureAwait(false);
+            return result.ToHttpResult();
+        })
+        .RequireAuthorization()
+        .WithName("DeleteMediaExternal");
+
+        return app;
+    }
+}

backend/src/CCE.Api.External/Program.cs

@@ -64,6 +64,7 @@
 app.UseCceUserSync();
 app.UseCcePrometheus();
 app.UseMiddleware<LocalizationMiddleware>();
+app.UseStaticFiles();
 
 app.UseCceOpenApi(apiTag: "external");
 
@@ -106,6 +107,7 @@
 app.MapHomepageSettingsPublicEndpoints();
 app.MapAboutSettingsPublicEndpoints();
 app.MapPoliciesSettingsPublicEndpoints();
+app.MapMediaPublicEndpoints();
 
 app.MapGet("/health", async (IMediator mediator) =>
 {

backend/src/CCE.Api.External/appsettings.Development.json

@@ -82,5 +82,8 @@
       "BaseUrl": "http://localhost:3001",
       "TimeoutSeconds": 30
     }
+  },
+  "Media": {
+    "BaseUrl": "https://cce-external-api.runasp.net/media/"
   }
 }

backend/src/CCE.Api.External/appsettings.json

@@ -46,5 +46,26 @@
     "RefreshTokenDays": 30,
     "PasswordResetTokenHours": 2,
     "RequireConfirmedEmail": false
+  },
+  "Media": {
+    "BaseUrl": "https://cce-external-api.runasp.net/media/",
+    "MaxSizeBytes": 52428800,
+    "AllowedMimeTypes": [
+      "image/png",
+      "image/jpeg",
+      "image/gif",
+      "image/svg+xml",
+      "image/webp",
+      "video/mp4",
+      "video/webm",
+      "application/pdf",
+      "text/csv",
+      "text/plain",
+      "application/zip",
+      "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+      "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+      "application/vnd.ms-excel",
+      "application/msword"
+    ]
   }
 }