Secure File Upload

Baseline controls for uploads that later feed embeddings or tool-using agents.

Intended use

Use before connecting user uploads to RAG indexes or automated summarization jobs.