Tenant-Isolated Thumbnail Intake for Private Object Storage and Browser Uploads

Use an application-owned upload boundary for customer-support thumbnails unless the production...