Add :closed true to schema:import-binfile to reject unknown keys. Remove file-id from handler destructuring, config binding, and audit props to prevent specifying a target file on import. AI-assisted-by: mimo-v2.5-pro