Review-pass fixes

Seven code review findings fixed across performance, security, and correctness, and cover art uploads up to 10MB.