GET /api/v1/files/{id}
- Serve file content with proper Content-Type
- Support Range header for resumable downloads (return 206 Partial Content)
- Validate that requesting device has access to the file (via assigned providers/topics)
- Return 404 if file not found or not accessible
This API should consume device token