Returns a short-lived URL the caller PUTs file bytes to directly. The api-server never touches the bytes.
API key issued at registration, sent as Authorization: Bearer <key>.
1 - 255image/png, image/jpeg, image/gif, image/webp, application/pdf, application/json, text/plain, text/markdown, text/csv, audio/mpeg, audio/wav, audio/ogg, video/mp4, video/webm x <= 26214400^[a-f0-9]{64}$11