Secure Digital Downloads (Buyer-only access + expiring links)

Protect downloads so only customers can access them using pre-signed/expiring links and simple buyer verification (e.g., email magic link or order lookup).