docs(sdk): also fix cdn_url/cache_kind in comments and prose (gate misses comments)

Author: MajorTal

sdk/README.md

@@ -97,14 +97,14 @@ field that does not exist on the actual type.
 
 ### Paste-and-go assets — content-addressed URLs with SRI
 
-`r.blobs.put` returns an `AssetRef`. The `cdn_url` is content-addressed (`pr-<public_id>.run402.com/_blob/<key>-<8hex>.<ext>`), served through CloudFront, and never needs cache invalidation. The browser refuses execution on byte mismatch via SRI:
+`r.blobs.put` returns an `AssetRef`. The `cdnUrl` is content-addressed (`pr-<public_id>.run402.com/_blob/<key>-<8hex>.<ext>`), served through CloudFront, and never needs cache invalidation. The browser refuses execution on byte mismatch via SRI:
 
 ```ts
 const logo = await r.blobs.put(projectId, "logo.png", { bytes });
-//   logo.cdn_url   → drop into <img src="…">
-//   logo.sri       → "sha256-…" for <script integrity="…">
-//   logo.etag      → strong "sha256-<hex>"
-//   logo.cache_kind → "immutable" | "mutable" | "private"
+//   logo.cdnUrl     → drop into <img src="…">
+//   logo.sri        → "sha256-…" for <script integrity="…">
+//   logo.etag       → strong "sha256-<hex>"
+//   logo.cacheKind  → "immutable" | "mutable" | "private"
 ```
 
 `immutable: true` is the default since v1.45 — pass `false` only when you specifically want to skip the SHA-256 pass on a very large upload.

sdk/llms-sdk.txt

@@ -615,7 +615,7 @@ The CLI (`run402`), MCP server (`run402-mcp`), `@run402/functions`, and the Open
 - **Provision before authoring HTML.** The `anon_key` is permanent and must be embedded in your frontend; provision first, then write the HTML.
 - **Use the manifest for access control**, never raw `GRANT/REVOKE`.
 - **`user_owns_rows` is the default for user-scoped data.** Reach for `public_read_write_UNRESTRICTED` only on intentionally-public tables.
-- **Use immutable `cdn_url` from `r.blobs.put`.** It's correct from the moment of upload — no `waitFresh` needed.
+- **Use immutable `cdnUrl` from `r.blobs.put`.** It's correct from the moment of upload — no `waitFresh` needed.
 - **Don't bake unconditional `r.allowance.requestFaucet()` into deploy scripts** — the faucet rate-limits and breaks already-funded flows.
 - **Per-project rate limit is 100 req/sec.** On 429, back off using `retry_after`.
 - **`r.service.status()` works without auth.** Use it before evaluating Run402, or to distinguish platform issues from your own bugs.