Add S3 uploads to Vercel apps without storing long-lived AWS keys

Add S3 uploads to a Vercel app through a server route with short-lived OIDC credentials, not static AWS keys.