Clarify Obfuscator docs and route docstrings

site/app.py

@@ -5,9 +5,10 @@ Obfuscator — Managed Flask приложение на платформе Шту
 Штурвал запускает Flask самостоятельно (без Dockerfile/gunicorn).
 
 Роуты разнесены по blueprint'ам:
-- main_bp: GET /          — веб-интерфейс
-- health_bp: GET /health   — проверка живости
-- api_bp: POST /api/drhider — обфускация документов
+- main_bp: GET / и статика picker — веб-интерфейс
+- health_bp: GET /health          — проверка живости
+- api_bp: upload/process_stream/process/download/csv — обфускация документов
+- upload_refs: POST /api/upload_refs — pull файлов с ВМ-буфера в сессию
 """
 
 import os

site/routes/api_bp.py

@@ -1,12 +1,14 @@
 """
 Blueprint: API Obfuscator.
 
-Five endpoints:
-- POST /api/upload         — upload one file -> {session_id}
-- GET  /api/process_stream/<sid> — SSE: process files, per-file progress
-- POST /api/process/<sid>  — process all session files -> {status:"done"} (legacy)
-- GET  /api/download/<sid> — download ZIP (with timestamp name)
-- GET  /api/csv/<sid>      — download CSV separately
+Seven endpoints:
+- POST /api/upload                — upload one or more files -> {session_id}
+- GET  /api/session_files/<sid>   — diagnostic list of session files
+- POST /api/cancel/<sid>          — request cooperative stop
+- GET  /api/process_stream/<sid>  — SSE: process files, per-file progress
+- POST /api/process/<sid>         — process all session files -> {status:"done"} (legacy)
+- GET  /api/download/<sid>        — download ZIP (with timestamp name)
+- GET  /api/csv/<sid>             — download CSV separately
 """
 
 import io