* fix(middleware): publish externalized outputs atomically
_externalize reported failure with None but had already created the file, so a
write that failed part-way (disk full, interrupted request) left a truncated
file under the final name in the outputs directory. Write to a sibling temp file
and os.replace it into place, removing the temp file when the write fails.
* style: drop the unused pytest import from the externalize test
