Use Cache-Control: private on uploaded profile data so that it's not cached in proxies (#485)

Author: julienw

src/logic/gcs.ts

@@ -51,7 +51,7 @@ class RealGcsStorage implements GcsStorage {
       gzip: false, // Our content is already gzipped
       metadata: {
         contentType: 'text/plain',
-        cacheControl: 'max-age: 365000000, immutable',
+        cacheControl: 'max-age: 365000000, immutable, private',
         contentEncoding: 'gzip',
       },
     });

test/api/publish.test.ts

@@ -68,7 +68,7 @@ describe('publishing endpoints', () => {
     expect(file).toHaveProperty(
       'metadata',
       expect.objectContaining({
-        cacheControl: 'max-age: 365000000, immutable',
+        cacheControl: 'max-age: 365000000, immutable, private',
         contentEncoding: 'gzip',
         contentType: 'text/plain',
       })