Private upload

Uploads use authenticated access, random object paths, size/type limits, and quarantine. Document analysis is disabled until a safe processor is complete — files can still be stored privately.