Upload Security Message

Files in this MVP flow are used only for request intake and are not stored long-term in this frontend layer.

TODO: connect to approved storage and retention policies in backend integration.