Harden invoice public links and tighten draft UI.

Use publicId in links, compact key-point/account labels, English business names, and readable favicon deploy perms.

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/PROJECT_CONTEXT.md

@@ -318,6 +318,7 @@ Run in order from `MeshkeeApp Backend/database/migrations/`:
 | `037_invoice_name.sql` | Optional invoice name |
 | `038_invoice_templates.sql` | Full invoice templates + key points / accounts |
 | `039_invoice_account_holder.sql` | Account holder name on bank accounts |
+| `040_invoice_public_id.sql` | Opaque 12-digit `public_id` for public links |
 
 After schema changes: `npx prisma generate` and restart the backend.
 
@@ -345,11 +346,12 @@ Two template layers + issued invoices:
 
 **Public invoice viewer (platform):**
 - Route: super-admin SPA `/invoices/:id` (`PublicInvoicePage`) — glass layout, print-to-PDF, “Issued by” Meshkee footer
-- Local/dev link: current Vite origin (e.g. `https://meshkee.app:5174/invoices/{id}`)
+- Links use opaque **12-digit `publicId`** (not sequential PK) — `GET /public/invoices/:publicId`
+- Local/dev link: current Vite origin (e.g. `https://meshkee.app:5174/invoices/{publicId}`)
 - Production link domain: `VITE_INVOICE_PUBLIC_DOMAIN` / `INVOICE_PUBLIC_DOMAIN` (default `meshkee.com`) — optional full origin override via `*_PUBLIC_BASE_URL`
 - Until `meshkee.com` proxies or hosts `/invoices/*`, production links may need that DNS/nginx wiring (viewer code ships with super-admin build)
 
-**Migrations:** `036_invoices.sql`, `037_invoice_name.sql`, `038_invoice_templates.sql`, `039_invoice_account_holder.sql`
+**Migrations:** `036_invoices.sql` … `040_invoice_public_id.sql`
 
 **Super Admin UI:**
 - `/settings` — Invoice templates list + item templates (top text preview = one-line ellipsis)