Upload portal scaffold. Token validation, signed uploads, and document handling will be implemented next.