Upload a blob directly with on-the-fly moderation. Supports both authenticated requests (Bearer token) and presigned URLs (sig query param).