Worker cache allowlist
A shorter upstream freshness lifetime is preserved. Cookie-bearing or authorized requests, Set-Cookie responses, private/no-store directives, errors, unknown routes, writes, playback, profile configuration, and presence are excluded. WebSocket upgrades remain live.

