test(frontend): cover uploadExtraFiles project forwarding and the no-project guard

CodeRabbit: the transport test used a literal project, so a composer regression could pass. These hook tests assert the projectIdAtom value reaches uploadAttachment and that a missing project refuses the upload before any network call.