GET list (customer-scoped, AG Grid server-side: paginate / sort / filter) + POST UI upload.
UI-upload create shape. source_file must be an already-uploaded File row.