Owner upload

The application controls access. R2 carries the bytes.

FileDrop creates a 15-minute upload authorization, sends the file directly to the private bucket, then verifies the actual R2 metadata before marking it ready.