Add POST /vod-transfer on the internal admin server: pull a content-addressed VOD blob from another Streamplace node into our playback store and publish a place.stream.media.origin attesting we now host it. Only the primary content blob crosses the wire (fetched from the source's existing public getVideoBlob endpoint). The per-track init segments and the metafile are deterministically regenerated locally via `muxl unwrap` -> the existing metafileBuilder, so no non-content-addressed surface is needed on the source. Downloaded bytes are verified against the expected BDASL CID before anything is persisted or published. TestRegenerateSidecars proves the locally-regenerated metafile (track table incl. segment byte offsets + init CIDs) is byte-identical to what the originating node produced at processing time. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>