fix: secure upload/download paths, default filter, status enum compare, upload validation

templates/jobs.html

@@ -18,7 +18,7 @@
     {% for job in jobs %}
         <tr>
             <td><a href="/status/{{ job.job_id }}">{{ job.job_id }}</a></td>
-            <td class="status-{{ job.status|lower }}">{{ job.status.name }}</td>
+            <td class="status-{{ job.status.name|lower }}">{{ job.status.name }}</td>
             <td>{{ "%.0f"|format(job.progress * 100) }}%</td>
             <td>{{ job.model_configs|length }} model(s)</td>
             <td>{{ "%.1f"|format(job.created_at) }}</td>