q — ephemeral in-RAM job queue (FIFO, no Redis, exactly-once delivery)

Push the request body as ONE item, pop the oldest item once. Held in RAM
only — a restart wipes everything. Treat the queue name as a shared secret.

PUSH (producer) — body = one item:
  echo 'job-001' | curl --data-binary @- https://fleet-q.0exec.com/work          # 201 Created
  cmd 2>&1       | curl --data-binary @- https://fleet-q.0exec.com/work           # any bytes
  for f in *; do echo "$f" | curl --data-binary @- https://fleet-q.0exec.com/work; done

POP (worker) — oldest item, removed (delivered exactly once):
  curl https://fleet-q.0exec.com/work                 # 200 + raw bytes, or 204 if empty
  curl 'https://fleet-q.0exec.com/work?wait=30'       # block up to 30s for an item (clamp 0..60)
  while job=$(curl -sf 'https://fleet-q.0exec.com/work?wait=60'); do process "$job"; done

INSPECT (no consume):
  curl 'https://fleet-q.0exec.com/work?peek'          # oldest item without removing it (200|204)
  curl 'https://fleet-q.0exec.com/work?len'           # how many items are queued (text count)

CLEAR:
  curl -X DELETE https://fleet-q.0exec.com/work       # empty the queue (204)

Notes:
  * --data-binary @- streams stdin verbatim; plain -d would mangle newlines.
  * One request body = one queue item. Empty bodies are rejected (400).
  * FIFO: the oldest push is the next pop. Each item is delivered once.
  * 204 No Content = the queue is empty (or the ?wait timeout elapsed).
  * Bounded per queue: max items + total bytes; a full queue returns 429.
  * Per-IP write rate limit; reads (pop/peek/len) are never limited.
  * Idle queues (no traffic for ~1h) are reaped; pending work is preserved.
  * zsh "no matches found"? Quote any URL with a '?'  e.g. 'https://fleet-q.0exec.com/work?len'.