Versioned assets are served with a one-year max-age. Unversioned paths use a short TTL and revalidate on each request.
Filenames include a content hash. Update references when rebuilding.