Document uploads
/api/document/new accepts resumable tus uploads from callers with document-create permission. Creating, inspecting, resuming, deleting, and concatenating an upload require the same authenticated user and selected tenant; the upload URL alone does not grant access. Completed uploads are stored as temporary documents for that tenant.
Uploads created before this ownership isolation cannot be resumed and must be restarted. Incomplete uploads expire after one day of inactivity.