quick fix worker auth

storage-worker/src/index.ts

@@ -13,16 +13,16 @@
 
 export default {
 	async fetch(request, env) {
-		// Auth check first
-		const auth = request.headers.get("Authorization");
-		if (auth !== `Bearer ${env.YOMITAN_STORAGE_API_TOKEN}`) {
-			return new Response("Unauthorized", { status: 401 });
-		}
-
 		const url = new URL(request.url);
 
 		// List files: GET /files
 		if (url.pathname === '/files') {
+			// Auth check first
+			const auth = request.headers.get("Authorization");
+			if (auth !== `Bearer ${env.YOMITAN_STORAGE_API_TOKEN}`) {
+				return new Response("Unauthorized", { status: 401 });
+			}
+
 			const list = await env.BUCKET.list();
 			const files = list.objects
 				.filter((o) => o.size)