Authenticated uploads only
This endpoint is not public. The local generator must send an Authorization: Bearer token to
the API. Anonymous browser uploads are disabled.
API flow
1. Create an upload job with POST /api/uploads.
2. Upload the MP4 bytes with PUT /api/uploads/:id/file.
3. Check status with GET /api/uploads/:id.
Required auth
Use a shared secret in UPLOAD_API_TOKEN. The server checks the token on every upload request.