Fix Open Graph card images breaking when shared

Open Graph card images no longer return “Not found” when shared. Previously, the page metadata and the image route computed their card data independently, so link previews could advertise an image URL that the image endpoint could not resolve. Pages now sign the exact card payload used for the image URL, and the image endpoint only verifies the signature and renders the signed card data, so the two sides can no longer drift.