feat: add upload session foundation

Adds signed-upload session persistence scaffolding, sqlite migration wiring, backend config defaults, and initial upload-session service/tests.