Media custody

Uploads are not enabled in this build.

Future authorized media intake will require a project-scoped, revocable grant; short-lived private upload access; quarantine and validation; retention expiry; and independently verified revocation. No customer media is accepted by this release.