Harden remote image fetching for create/form inputs

Validate image URLs before fetching, reject private and local
destinations, and re-check redirect and DNS targets to reduce SSRF
risk for untrusted create and form-fill inputs.